integration vulnerabilities

CVEs whose affected-version data names the integration package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-14040High· 7.5

6y ago

golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)

A denial of service vulnerability was found in the golang.org/x/text library. A library or application must use one of the vulnerable functions, such as unicode.Transform, transform.String, or transform.Byte, to be susceptible to this vuln…

▾ TwilightRed Hat · Red Hat OpenShift Container Platform 4.6EPSS 1.8%via CSAF