Search for packages
Package details: pkg:rpm/redhat/ose-cluster-kube-storage-version-migrator-operator-container@4.9.0-202202120107.p0.g7245b0f.assembly?arch=stream
purl pkg:rpm/redhat/ose-cluster-kube-storage-version-migrator-operator-container@4.9.0-202202120107.p0.g7245b0f.assembly?arch=stream
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-pz2t-umsf-aaan
Aliases:
CVE-2021-29923
Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR. There are no reported fixed by versions.
VCID-v537-bky8-aaak
Aliases:
CVE-2021-36221
Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version