cryostat_2_on_rhel vulnerabilities

CVEs whose affected-version data names the cryostat_2_on_rhel package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-26160High· 7.5PoC

6y ago

jwt-go: access restriction bypass vulnerability (CVE-2020-26160)

A vulnerability was found in jwt-go where it is vulnerable to Access Restriction Bypass if m["aud"] happens to be []string{}, as allowed by the spec, the type assertion fails and the value of aud is "". This can cause audience verification…

▾ MidnightRed Hat · Red Hat OpenShift Container Platform 4EPSS 2.2%via CSAF