{"id":"BIT-golang-2023-39325","revision":null,"records":[{"revision":"89d8c4ec85354cbc940b342bf09d028e","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-39325","aliases":[],"title":"HTTP/2 rapid reset can cause excessive work in net/http","description":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.","state":0,"publishedAt":"2023-10-11T21:15:02.727+00:00","modifiedAt":"2025-02-13T17:02:50.341+00:00","affected":[{"ecosystem":"https://pkg.go.dev","name":"net/http","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Go standard library\",\n                    \"product\": \"net/http\",\n                    \"collectionURL\": \"https://pkg.go.dev\",\n                    \"packageName\": \"net/http\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"1.20.10\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"1.21.0-0\",\n                            \"lessThan\": \"1.21.3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"http2serverConn.serve\"\n                        },\n                        {\n                            \"name\": \"http2serverConn.processHeaders\"\n                        },\n                        {\n                            \"name\": \"http2serverConn.upgradeRequest\"\n                        },\n                        {\n                            \"name\": \"http2serverConn.runHandler\"\n                        },\n                        {\n                            \"name\": \"ListenAndServe\"\n                        },\n                        {\n                            \"name\": \"ListenAndServeTLS\"\n                        },\n                        {\n                            \"name\": \"Serve\"\n                        },\n                        {\n                            \"name\": \"ServeTLS\"\n                        },\n                        {\n                            \"name\": \"Server.ListenAndServe\"\n                        },\n                        {\n                            \"name\": \"Server.ListenAndServeTLS\"\n                        },\n                        {\n                            \"name\": \"Server.Serve\"\n                        },\n                        {\n                            \"name\": \"Server.ServeTLS\"\n                        },\n                        {\n                            \"name\": \"http2Server.ServeConn\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"https://pkg.go.dev","name":"golang.org/x/net/http2","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"golang.org/x/net\",\n                    \"product\": \"golang.org/x/net/http2\",\n                    \"collectionURL\": \"https://pkg.go.dev\",\n                    \"packageName\": \"golang.org/x/net/http2\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"0.17.0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"serverConn.serve\"\n                        },\n                        {\n                            \"name\": \"serverConn.processHeaders\"\n                        },\n                        {\n                            \"name\": \"serverConn.upgradeRequest\"\n                        },\n                        {\n                            \"name\": \"serverConn.runHandler\"\n                        },\n                        {\n                            \"name\": \"Server.ServeConn\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://go.dev/issue/63417","https://go.dev/cl/534215","https://go.dev/cl/534235","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://pkg.go.dev/vuln/GO-2023-2102","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://security.netapp.com/advisory/ntap-20231110-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/","https://security.gentoo.org/glsa/202311-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-39325","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-39325","identifiers":["CVE-2023-39325"]},"retained":false,"historicalAffected":[]},{"revision":"009b8d8a176541318317ccc9f0d747b3","observedAt":"2026-11-10T23:24:37.205+00:00","statement":{"source":"euvd","id":"EUVD-2023-2635","aliases":["CVE-2023-39325","GHSA-4374-p667-p6c8"],"title":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting …","description":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[],"references":["https://go.dev/issue/63417","https://go.dev/cl/534215","https://go.dev/cl/534235","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://pkg.go.dev/vuln/GO-2023-2102","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://security.netapp.com/advisory/ntap-20231110-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/","https://security.gentoo.org/glsa/202311-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2635","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 11, 2023, 9:15:02 PM","dateUpdated":"Feb 13, 2025, 5:02:50 PM"},"relatedAdvisories":[{"id":"RHSA-2023:6243","title":"Red Hat Security Advisory: openshift-gitops-kam security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7322","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.23 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:13326-1","title":"go1.20-1.20.10-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5952","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.4.4 security update","vulnerabilityIds":["CVE-2021-32760","CVE-2023-26054","CVE-2023-39325"]},{"id":"RHSA-2023:6116","title":"Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.14 security and bug fix update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7478","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.54 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7704","title":"Red Hat Security Advisory: OpenShift Virtualization 4.14.1 security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0941","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.14 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:10523","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.42 bug fix and security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-39325"]},{"id":"RHSA-2023:6129","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.19 security and extras update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5967","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (collectd-libpod-stats, etcd) security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"openSUSE-SU-2026:11819-1","title":"fake-gcs-server-1.56.1-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5866","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"SUSE-SU-2023:4068-1","title":"Security update for go1.20","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6031","title":"Red Hat Security Advisory: Cryostat security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-29406","CVE-2023-29409","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5971","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (director-operator) security update","vulnerabilityIds":["CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0269","title":"Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.0 for RHEL 9","vulnerabilityIds":["CVE-2023-39325","CVE-2023-39326","CVE-2023-44487","CVE-2023-45287"]},{"id":"RHSA-2024:1449","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.5 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-47108"]},{"id":"RHSA-2023:6279","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.11.5","vulnerabilityIds":["CVE-2023-29409","CVE-2023-39325"]},{"id":"RHSA-2023:7215","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.2.12","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"SUSE-SU-2024:3343-1","title":"Security update for kubernetes1.24","vulnerabilityIds":["CVE-2021-25743","CVE-2023-2727","CVE-2023-2728","CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-0793","CVE-2024-24786","CVE-2024-3177"]},{"id":"RHSA-2024:0306","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.57 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6217","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:4118","title":"Red Hat Security Advisory: Red Hat Ceph Storage 5.3 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45142","CVE-2023-49569"]},{"id":"RHSA-2023:6115","title":"Red Hat Security Advisory: OpenShift API for Data Protection security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7607","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.45 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5980","title":"Red Hat Security Advisory: Satellite 6.11.5.6 async security update","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-46648","CVE-2022-47318","CVE-2023-0118","CVE-2023-0462","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7288","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update","vulnerabilityIds":["CVE-2022-25857","CVE-2022-29599","CVE-2022-42889","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5009","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update","vulnerabilityIds":["CVE-2022-27664","CVE-2023-2727","CVE-2023-2728","CVE-2023-3089","CVE-2023-3153","CVE-2023-3978","CVE-2023-29409","CVE-2023-29824","CVE-2023-37788","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7315","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.3 bug fix and security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6040","title":"Red Hat Security Advisory: Node Maintenance Operator 5.2.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5864","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:3927","title":"Red Hat Security Advisory: Red Hat Ceph Storage 7.1 container image security, and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2024-22195"]},{"id":"RHEA-2024:1870","title":"Red Hat Enhancement Advisory: Advisory for publishing Helm 3.13.2 GA release","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7602","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.25 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"SUSE-SU-2024:3097-1","title":"Security update for kubernetes1.28","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"SUSE-SU-2024:3344-1","title":"Security update for kubernetes1.25","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"RHSA-2024:1052","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.51 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-49568","CVE-2023-49569"]},{"id":"RHSA-2023:7831","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.7 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142","CVE-2023-47108"]},{"id":"RHSA-2023:7604","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.25 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5717","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.52 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7515","title":"Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 9.0.0 security update","vulnerabilityIds":["CVE-2023-3676","CVE-2023-3955","CVE-2023-39325"]},{"id":"RHSA-2023:7469","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.4 security and extras update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHSA-2023:6782","title":"Red Hat Security Advisory: openshift-gitops-kam security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7475","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.24 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5979","title":"Red Hat Security Advisory: Satellite 6.12.5.2 Async Security Update","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-3874","CVE-2022-46648","CVE-2022-47318","CVE-2023-0118","CVE-2023-0462","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6894","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.44 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6077","title":"Red Hat Security Advisory: toolbox security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6839","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6061","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.12.1 release and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6145","title":"Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.2.9 security updates and bug fixes","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7599","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.5 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHBA-2023:7586","title":"Red Hat Bug Fix Advisory: LVMS 4.13.z Bug Fix and Enhancement update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0484","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.31 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5005","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7479","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.54 bug fix and security update","vulnerabilityIds":["CVE-2023-5408","CVE-2023-39325"]},{"id":"RHBA-2023:6109","title":"Red Hat Bug Fix Advisory: MTV 2.4.3 Images","vulnerabilityIds":["CVE-2022-32190","CVE-2022-41723","CVE-2022-41724","CVE-2022-41725","CVE-2023-3978","CVE-2023-24534","CVE-2023-24536","CVE-2023-24537","CVE-2023-24538","CVE-2023-24539","CVE-2023-29400","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7345","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.9.3 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5865","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6817","title":"Red Hat Security Advisory: OpenShift Virtualization 4.14.0 Images security and bug fix update","vulnerabilityIds":["CVE-2021-20329","CVE-2022-41724","CVE-2022-41725","CVE-2023-25153","CVE-2023-25173","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6846","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.22 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:13506-1","title":"traefik-2.10.7-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45283","CVE-2023-45284","CVE-2023-47106","CVE-2023-47124","CVE-2023-47633"]},{"id":"RHSA-2023:6788","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6048","title":"Red Hat Security Advisory: ACS 4.2 enhancement and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5976","title":"Red Hat Security Advisory: Service Telemetry Framework 1.5.2 security update","vulnerabilityIds":["CVE-2022-41724","CVE-2023-24532","CVE-2023-24534","CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7323","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.23 bug fix and security update","vulnerabilityIds":["CVE-2023-30551","CVE-2023-39325"]},{"id":"RHSA-2023:7690","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.55 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5738","title":"Red Hat Security Advisory: go-toolset and golang security and bug fix update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6240","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13 low-latency extras security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"WID-SEC-W-2023-3146","title":"IBM MQ Operator and Queue manager: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-4641","CVE-2023-44487","CVE-2023-43804","CVE-2023-4016","CVE-2023-3978","CVE-2023-39325","CVE-2023-39319","CVE-2023-39318","CVE-2023-29409","CVE-2023-25173","CVE-2023-25153","CVE-2022-41723","CVE-2022-41717","CVE-2022-31030","CVE-2022-23471"]},{"id":"RHSA-2023:5867","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6143","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 CNF vRAN extras security update","vulnerabilityIds":["CVE-2023-30841","CVE-2023-39325"]},{"id":"RHSA-2023:6276","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.42 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6271","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.53 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7470","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.4 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHSA-2023:6202","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.8 security and bug fix updates","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"openSUSE-SU-2023:0360-1","title":"Security update for go1.21","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39320","CVE-2023-39321","CVE-2023-39322","CVE-2023-39323","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5895","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.40 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5970","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (collectd-libpod-stats) security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7201","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-39326","CVE-2023-45287","CVE-2023-48795"]},{"id":"RHSA-2024:0485","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.48 bug fix and security update","vulnerabilityIds":["CVE-2022-32190","CVE-2022-41723","CVE-2023-3978","CVE-2023-6596","CVE-2023-39325"]},{"id":"RHSA-2023:5809","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2.2 Product Security and Bug Fix Update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:6755","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.2 security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2024-6104","CVE-2024-24789","CVE-2024-28176","CVE-2024-28863","CVE-2024-29180","CVE-2024-37890","CVE-2024-41818"]},{"id":"WID-SEC-W-2023-2723","title":"Red Hat Satellite: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-3874","CVE-2022-46648","CVE-2022-47318","CVE-2023-0118","CVE-2023-0462","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5672","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.17 bug fix and security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-3153","CVE-2023-39325"]},{"id":"RHSA-2023:7741","title":"Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancements, and bug fix update","vulnerabilityIds":["CVE-2023-1387","CVE-2023-1410","CVE-2023-2183","CVE-2023-2801","CVE-2023-39325","CVE-2023-44487"]},{"id":"WID-SEC-W-2025-0001","title":"IBM DB2: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-32740","CVE-2021-41186","CVE-2022-0759","CVE-2022-24795","CVE-2022-31163","CVE-2023-39325","CVE-2023-41993","CVE-2023-45283","CVE-2023-45288","CVE-2023-6597","CVE-2024-0406","CVE-2024-20918","CVE-2024-20952","CVE-2024-2398","CVE-2024-24786","CVE-2024-27281","CVE-2024-2961","CVE-2024-29857","CVE-2024-33599","CVE-2024-33883","CVE-2024-37370","CVE-2024-37371","CVE-2024-37890","CVE-2024-39338","CVE-2024-4068","CVE-2024-41110","CVE-2024-41123","CVE-2024-41946","CVE-2024-45296","CVE-2024-45491","CVE-2024-45590","CVE-2024-47220","CVE-2024-47554","CVE-2024-6119","CVE-2024-6345"]},{"id":"RHSA-2023:6118","title":"Red Hat Security Advisory: OpenShift API for Data Protection security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0059","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.56 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7682","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.6 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45142"]},{"id":"SUSE-SU-2023:4469-1","title":"Security update for go1.21-openssl","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39320","CVE-2023-39321","CVE-2023-39322","CVE-2023-39323","CVE-2023-39325","CVE-2023-44487","CVE-2023-45283","CVE-2023-45284"]},{"id":"RHSA-2023:7474","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.24 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6122","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.3 security and bug fix updates","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"SUSE-SU-2023:4069-1","title":"Security update for go1.21","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHBA-2023:5669","title":"Red Hat Bug Fix Advisory: OpenShift Compliance Operator bug fix and enhancement update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5933","title":"Red Hat Security Advisory: Openshift Secondary Scheduler Operator 1.1.3 security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7481","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.54 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5835","title":"Red Hat Security Advisory: rhc-worker-script enhancement and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7699","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1572","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.54 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:13376-1","title":"cmctl-1.13.2-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2025:1116","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.55  bug fix and security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-6597","CVE-2023-39325","CVE-2024-6104","CVE-2024-45338"]},{"id":"RHSA-2023:5719","title":"Red Hat Security Advisory: go-toolset-1.19 and go-toolset-1.19-golang security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"openSUSE-SU-2024:13327-1","title":"go1.21-1.21.3-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7610","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.45 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-46136"]},{"id":"RHSA-2023:6044","title":"Red Hat Security Advisory: Cost Management security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7827","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6179","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update","vulnerabilityIds":["CVE-2022-25857","CVE-2022-29599","CVE-2022-42889","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0642","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.11 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142","CVE-2023-47108","CVE-2023-49568","CVE-2023-49569"]},{"id":"RHSA-2023:5974","title":"Red Hat Security Advisory: Network Observability security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6837","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.2 bug fix and security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHEA-2024:0531","title":"Red Hat Enhancement Advisory: OpenShift Container Platform 4.12.48 CNF vRAN extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7521","title":"Red Hat Security Advisory: OpenShift Virtualization 4.13.6 RPMs security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1765","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.21 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2024-24786","CVE-2024-26602"]},{"id":"RHSA-2023:6130","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.19 bug fix and security update","vulnerabilityIds":["CVE-2023-5408","CVE-2023-39325"]},{"id":"RHSA-2023:5982","title":"Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-41717","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0273","title":"Red Hat Security Advisory: OpenShift Virtualization 4.12.9 Images security and bug fix update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:14076-1","title":"traefik2-2.11.5-1.1 on GA media","vulnerabilityIds":["CVE-2022-23469","CVE-2022-41717","CVE-2022-41724","CVE-2022-46153","CVE-2023-24534","CVE-2023-29013","CVE-2023-39325","CVE-2023-45283","CVE-2023-45284","CVE-2023-45288","CVE-2023-47106","CVE-2023-47124","CVE-2023-47633","CVE-2024-24788","CVE-2024-28869"]},{"id":"RHSA-2024:0946","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.35 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6787","title":"Red Hat Security Advisory: Network Observability security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5950","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.2.11 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5721","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6893","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.44 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0954","title":"Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.0 security update","vulnerabilityIds":["CVE-2023-5528","CVE-2023-39325","CVE-2023-48795"]},{"id":"RHBA-2023:6863","title":"Red Hat Bug Fix Advisory: LVMS 4.14.z Bug Fix and Enhancement update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6172","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update","vulnerabilityIds":["CVE-2020-7692","CVE-2022-25857","CVE-2022-29599","CVE-2022-42889","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-27903","CVE-2023-27904","CVE-2023-39325"]},{"id":"RHSA-2023:6125","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.41 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6841","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:4631","title":"Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.15.0 release","vulnerabilityIds":["CVE-2022-3064","CVE-2022-21698","CVE-2022-28948","CVE-2022-46175","CVE-2023-6378","CVE-2023-39325","CVE-2023-41080","CVE-2023-44487","CVE-2023-45288","CVE-2023-45648"]},{"id":"RHBA-2023:6078","title":"Red Hat Bug Fix Advisory: MTV 2.5.2 Images","vulnerabilityIds":["CVE-2022-41723","CVE-2023-26125","CVE-2023-26144","CVE-2023-29401","CVE-2023-39325","CVE-2023-44487"]},{"id":"SUSE-SU-2023:4472-1","title":"Security update for go1.20-openssl","vulnerabilityIds":["CVE-2023-39323","CVE-2023-39325","CVE-2023-44487","CVE-2023-45283","CVE-2023-45284"]},{"id":"RHSA-2023:6042","title":"Red Hat Security Advisory: Self Node Remediation Operator 0.5.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0741","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.33 bug fix and security update","vulnerabilityIds":["CVE-2022-3064","CVE-2023-39325","CVE-2023-47108","CVE-2023-49568","CVE-2023-49569","CVE-2024-0793"]},{"id":"RHSA-2023:5851","title":"Red Hat Security Advisory: RHACS 4.1 enhancement and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6220","title":"Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.10.1 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5965","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats, etcd) security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHBA-2023:7585","title":"Red Hat Bug Fix Advisory: LVMS 4.12.z bug fix update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"SUSE-SU-2024:3341-1","title":"Security update for kubernetes1.23","vulnerabilityIds":["CVE-2021-25743","CVE-2023-2727","CVE-2023-2728","CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-0793","CVE-2024-24786","CVE-2024-3177"]},{"id":"RHSA-2023:6248","title":"Red Hat Security Advisory: OpenShift Virtualization 4.12.8 Images security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0777","title":"Red Hat Security Advisory: jenkins and jenkins-2-plugins security update","vulnerabilityIds":["CVE-2022-25857","CVE-2022-29599","CVE-2022-42889","CVE-2023-2976","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-35116","CVE-2023-37946","CVE-2023-37947","CVE-2023-39325","CVE-2023-40336","CVE-2023-40337","CVE-2023-40338","CVE-2023-40339","CVE-2023-40341","CVE-2023-44487"]},{"id":"RHSA-2023:6251","title":"Red Hat Security Advisory: OpenShift Virtualization 4.11.7 Images security and bug fix update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6269","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.12.1","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6039","title":"Red Hat Security Advisory: Node Maintenance Operator 5.0.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6171","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.11 Openshift Jenkins security update","vulnerabilityIds":["CVE-2022-1471","CVE-2022-29599","CVE-2022-42889","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-27903","CVE-2023-27904","CVE-2023-39325"]},{"id":"RHSA-2023:7325","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.23 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0682","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.58 bug fix and security update","vulnerabilityIds":["CVE-2023-6596","CVE-2023-39325"]},{"id":"RHSA-2023:5006","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 bug fix and security update","vulnerabilityIds":["CVE-2018-17419","CVE-2021-4294","CVE-2021-20329","CVE-2021-36157","CVE-2022-3064","CVE-2022-23525","CVE-2022-23526","CVE-2022-41723","CVE-2023-0475","CVE-2023-0620","CVE-2023-0665","CVE-2023-3089","CVE-2023-3978","CVE-2023-5408","CVE-2023-25000","CVE-2023-25165","CVE-2023-25173","CVE-2023-26115","CVE-2023-26136","CVE-2023-27561","CVE-2023-29401","CVE-2023-37788","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6144","title":"Red Hat Security Advisory: Custom Metric Autoscaler operator for Red Hat OpenShift security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6071","title":"Red Hat Security Advisory: RHACS 4.0 enhancement and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0290","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.10 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHEA-2023:7327","title":"Red Hat Enhancement Advisory: Red Hat 3scale API Management 2.13.7 Release - Container Images","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6057","title":"Red Hat Security Advisory: toolbox security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:10142","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.39 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6275","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.42 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6041","title":"Red Hat Security Advisory: Self Node Remediation Operator 0.7.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0833","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.50 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142","CVE-2023-49568","CVE-2023-49569"]},{"id":"RHSA-2023:6818","title":"Red Hat Security Advisory: Satellite 6.14 security and bug fix update","vulnerabilityIds":["CVE-2022-0759","CVE-2022-1292","CVE-2022-2068","CVE-2022-3644","CVE-2022-3874","CVE-2022-4130","CVE-2022-40899","CVE-2022-41717","CVE-2022-44566","CVE-2022-44570","CVE-2022-44571","CVE-2022-44572","CVE-2022-46648","CVE-2022-47318","CVE-2023-0118","CVE-2023-0119","CVE-2023-1894","CVE-2023-22792","CVE-2023-22794","CVE-2023-22795","CVE-2023-22796","CVE-2023-22799","CVE-2023-27530","CVE-2023-27539","CVE-2023-29406","CVE-2023-30608","CVE-2023-31047","CVE-2023-32681","CVE-2023-36053","CVE-2023-39325","CVE-2023-40267","CVE-2023-44487"]},{"id":"RHSA-2024:1770","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.9 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2024-21501"]},{"id":"RHBA-2024:0599","title":"Red Hat Bug Fix Advisory: Migration Toolkit for Applications bug fix and enhancement update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0664","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.49 bug fix update and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2025:4240","title":"Red Hat Security Advisory: Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog.","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45288","CVE-2024-24788","CVE-2024-24789","CVE-2024-24790","CVE-2024-34156"]},{"id":"RHSA-2023:7200","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.z security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-39326","CVE-2023-45287"]},{"id":"RHSA-2023:6126","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.41 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"openSUSE-SU-2024:13384-1","title":"velero-1.12.1-1.1 on GA media","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6845","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.22 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7823","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.46 bug fix and security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325"]},{"id":"RHSA-2024:0193","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.29 bug fix and security update","vulnerabilityIds":["CVE-2021-20329","CVE-2023-39325"]},{"id":"SUSE-SU-2024:3094-1","title":"Security update for kubernetes1.26","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2024-24786"]},{"id":"RHSA-2023:6119","title":"Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.3.3 security updates and bug fixes","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1210","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.2 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-48795"]},{"id":"RHSA-2023:7555","title":"Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.0 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45142"]},{"id":"RHBA-2023:5806","title":"Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6828","title":"Red Hat Security Advisory: ACS 4.1 enhancement update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6256","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.21 security and extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6296","title":"Red Hat Security Advisory: Release of OpenShift Serverless 1.30.2","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHBA-2023:5652","title":"Red Hat Bug Fix Advisory: OpenShift File Integrity Operator bug fix and enhancement update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6156","title":"Red Hat Security Advisory: Red Hat OpenShift support for Windows Containers 8.1.0 security update","vulnerabilityIds":["CVE-2023-2431","CVE-2023-39325"]},{"id":"RHSA-2024:0837","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.13 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6200","title":"Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.1.9 security updates and bug fixes","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1464","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.59 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6161","title":"Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.14 security and bug fix update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHBA-2023:6254","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform Assisted Installer version 2.26.1 release","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6785","title":"Red Hat Security Advisory: Machine Deletion Remediation Operator 0.2.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5542","title":"Red Hat Security Advisory: Logging Subsystem 5.5.17 - Red Hat OpenShift security update","vulnerabilityIds":["CVE-2023-26136","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6305","title":"Red Hat Security Advisory: Migration Toolkit for Applications security update","vulnerabilityIds":["CVE-2023-0482","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7710","title":"Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 7.2.0 security update","vulnerabilityIds":["CVE-2023-5528","CVE-2023-39325"]},{"id":"RHSA-2023:5007","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update","vulnerabilityIds":["CVE-2021-20329","CVE-2022-41723","CVE-2023-3978","CVE-2023-37788","CVE-2023-39325"]},{"id":"RHSA-2023:6257","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.21 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6059","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6832","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2021-4048","CVE-2022-41723","CVE-2023-2121","CVE-2023-3462","CVE-2023-3978","CVE-2023-5077","CVE-2023-24534","CVE-2023-24539","CVE-2023-29400","CVE-2023-37788","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHBA-2023:6820","title":"Red Hat Bug Fix Advisory: Red Hat Quay v3.8.14 bug fix release","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7703","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.10.6 release and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5675","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.17 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6842","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.43 bug fix and security update","vulnerabilityIds":["CVE-2023-5408","CVE-2023-39325"]},{"id":"RHSA-2023:6298","title":"Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.30.2 security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5964","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats) security update","vulnerabilityIds":["CVE-2022-41724","CVE-2022-41725","CVE-2023-24534","CVE-2023-24536","CVE-2023-24537","CVE-2023-24538","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0198","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.47 security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325"]},{"id":"RHSA-2023:5947","title":"Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.0.1 security update","vulnerabilityIds":["CVE-2023-24532","CVE-2023-24539","CVE-2023-24540","CVE-2023-29400","CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6085","title":"Red Hat Security Advisory: Red Hat OpenShift distributed tracing security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5679","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.39 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7198","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 bug fix and security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-26159","CVE-2023-30551","CVE-2023-37788","CVE-2023-39325","CVE-2023-39326","CVE-2023-40577","CVE-2023-44487","CVE-2023-45142","CVE-2023-45285","CVE-2023-47108","CVE-2023-48795","CVE-2023-49569"]},{"id":"SUSE-SU-2024:3098-1","title":"Security update for kubernetes1.27","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"SUSE-SU-2024:3342-1","title":"Security update for kubernetes1.24","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"RHSA-2023:7687","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.26 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6786","title":"Red Hat Security Advisory: Fence Agents Remediation Operator 0.2.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1458","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.18 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-47108"]},{"id":"RHBA-2023:6124","title":"Red Hat Bug Fix Advisory: Red Hat Quay v3.9.4 minor release","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHBA-2023:6852","title":"Red Hat Bug Fix Advisory: Red Hat Quay v3.9.5 minor release","vulnerabilityIds":["CVE-2023-39325","CVE-2023-43804"]},{"id":"RHSA-2023:6235","title":"Red Hat Security Advisory: OpenShift Virtualization 4.13.5 Images security update","vulnerabilityIds":["CVE-2022-41723","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:0050","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.8 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHSA-2023:5810","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2025:0832","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.72 bug fix and security update","vulnerabilityIds":["CVE-2023-6597","CVE-2023-39325","CVE-2023-45288","CVE-2024-45338"]},{"id":"RHSA-2023:6836","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security and extras update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2026:8322","title":"Red Hat Security Advisory: rhc security update","vulnerabilityIds":["CVE-2023-39325","CVE-2026-25679"]},{"id":"RHSA-2024:1454","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.38 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0660","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.32 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142"]},{"id":"RHSA-2023:7342","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11 low-latency extras update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5530","title":"Red Hat Security Advisory: Logging Subsystem 5.7.7 - Red Hat OpenShift security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6165","title":"Red Hat Security Advisory: skupper-cli and skupper-router security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:1037","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.36 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6840","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.2 packages and security update","vulnerabilityIds":["CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5805","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update","vulnerabilityIds":["CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7691","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.55 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:7522","title":"Red Hat Security Advisory: OpenShift Virtualization 4.13.6 security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"WID-SEC-W-2024-1228","title":"Red Hat OpenStack: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2024-1135","CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-4438","CVE-2023-39326","CVE-2023-45287","CVE-2024-1394","CVE-2024-24680","CVE-2024-1141","CVE-2023-45803","CVE-2023-48795","CVE-2023-6725","CVE-2023-6110","CVE-2024-22195"]},{"id":"RHSA-2023:7344","title":"Red Hat Security Advisory: openshift-gitops-kam security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6233","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6121","title":"Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.1 security and bug fix update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5697","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.52 bug fix and security update","vulnerabilityIds":["CVE-2023-2253","CVE-2023-39325"]},{"id":"RHSA-2023:5935","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 security update","vulnerabilityIds":["CVE-2022-41724","CVE-2022-41725","CVE-2023-24532","CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2025:0014","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.71 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2024-6508"]},{"id":"RHSA-2023:6272","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.53 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHEA-2023:7235","title":"Red Hat Enhancement Advisory: ACS 4.3 enhancement update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7662","title":"Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 6.0.3 security update","vulnerabilityIds":["CVE-2023-5528","CVE-2023-39325"]},{"id":"RHSA-2023:5951","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.3.8 security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2024:0766","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142","CVE-2023-47108","CVE-2023-48795"]},{"id":"RHSA-2023:5863","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6781","title":"Red Hat Security Advisory: openshift-pipelines-client security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6084","title":"Red Hat Security Advisory: RHACS 3.74 enhancement and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6783","title":"Red Hat Security Advisory: Node Health Check Operator 0.4.1","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2024:10813","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.54 bug fix and security update","vulnerabilityIds":["CVE-2023-26125","CVE-2023-39325","CVE-2024-6508","CVE-2024-7409"]},{"id":"RHEA-2024:1366","title":"Red Hat Enhancement Advisory: Red Hat Developer Hub 1.1 release","vulnerabilityIds":["CVE-2023-26159","CVE-2023-39325","CVE-2023-42282","CVE-2023-44487","CVE-2023-45143","CVE-2023-48631","CVE-2023-50728"]},{"id":"RHSA-2023:6148","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.7.9 security and bug fix updates","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5677","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.39 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:5931","title":"Red Hat Security Advisory: Satellite 6.13.5 Async Security Update","vulnerabilityIds":["CVE-2022-1292","CVE-2022-2068","CVE-2022-3874","CVE-2022-24439","CVE-2022-46648","CVE-2022-47318","CVE-2023-0462","CVE-2023-3817","CVE-2023-31047","CVE-2023-36053","CVE-2023-39325","CVE-2023-40267","CVE-2023-44487"]},{"id":"RHSA-2024:0302","title":"Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"msrc_CVE-2023-39325","title":"HTTP/2 rapid reset can cause excessive work in net/http","vulnerabilityIds":["CVE-2023-39325"]},{"id":"RHSA-2023:6779","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Operator security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5541","title":"Red Hat Security Advisory: Logging Subsystem 5.6.12 - Red Hat OpenShift security update","vulnerabilityIds":["CVE-2023-26136","CVE-2023-29406","CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6280","title":"Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6784","title":"Red Hat Security Advisory: Node Health Check Operator 0.6.1 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:5969","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 security update","vulnerabilityIds":["CVE-2023-29409","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:6154","title":"Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.2.0","vulnerabilityIds":["CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39325","CVE-2023-44487"]},{"id":"RHSA-2023:7608","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.45 bug fix and security update","vulnerabilityIds":["CVE-2023-39325"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2023-2635","identifiers":["EUVD-2023-2635","CVE-2023-39325","GHSA-4374-p667-p6c8"]},"retained":false,"historicalAffected":[]},{"revision":"48023e52442a477bbb07e7706f7eebbf","observedAt":"2026-10-24T22:17:22.004+00:00","statement":{"source":"nvd","id":"CVE-2023-39325","aliases":[],"title":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting …","description":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.","state":0,"publishedAt":"2023-10-11T22:15:09.88+00:00","modifiedAt":"2026-06-17T06:12:02.173+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · nvd@nist.gov · Primary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/","https://pkg.go.dev/vuln/GO-2023-2102","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231110-0008/"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Modified","weaknesses":["CWE-770"],"productCriteria":["cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*","cpe:2.3:a:golang:http2:*:*:*:*:*:go:*:*","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*","cpe:2.3:a:netapp:astra_trident:-:*:*:*:*:*:*:*","cpe:2.3:a:netapp:astra_trident_autosupport:-:*:*:*:*:*:*:*"],"sourceDates":{"published":"2023-10-11T22:15:09.880","lastModified":"2026-06-17T06:12:02.173"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2023-39325","identifiers":["CVE-2023-39325"]},"retained":false,"historicalAffected":[]},{"revision":"3576c9c4b4f1457ba31c0a32f0814d98","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-4374-p667-p6c8","aliases":["BIT-golang-2023-39325","CVE-2023-39325","GO-2023-2102"],"title":"HTTP/2 rapid reset can cause excessive work in net/http","description":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. \n\nWith the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. \n\nThis issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2.\n\nThe default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.","state":0,"publishedAt":"2023-10-11T20:35:43+00:00","modifiedAt":"2026-09-10T03:49:24.7141886+00:00","affected":[{"ecosystem":"Go","name":"golang.org/x/net","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.17.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2023-39325","https://github.com/golang/go/issues/63417","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV","https://pkg.go.dev/vuln/GO-2023-2102","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231110-0008","https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z"],"sourceUrl":"https://github.com/advisories/GHSA-4374-p667-p6c8","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-4374-p667-p6c8","identifiers":["GHSA-4374-p667-p6c8","BIT-golang-2023-39325","CVE-2023-39325","GO-2023-2102"]},"retained":false,"historicalAffected":[]},{"revision":"f0337d5bfe92455a890e6240a67c9325","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2023-2102","aliases":["BIT-golang-2023-39325","CVE-2023-39325","GHSA-4374-p667-p6c8"],"title":"HTTP/2 rapid reset can cause excessive work in net/http","description":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing.\n\nWith the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection.\n\nThis issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2.\n\nThe default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.","state":0,"publishedAt":"2023-10-11T16:49:53+00:00","modifiedAt":"2026-09-28T10:56:56.1466903+00:00","affected":[{"ecosystem":"Go","name":"stdlib","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.20.10"},{"kind":"introduced","version":"1.21.0-0"},{"kind":"fixed","version":"1.21.3"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"golang.org/x/net","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.17.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://go.dev/issue/63417","https://go.dev/cl/534215","https://go.dev/cl/534235","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ"],"sourceUrl":"https://osv.dev/vulnerability/GO-2023-2102","license":"OSV · upstream source license applies","key":"osv:GO-2023-2102","identifiers":["GO-2023-2102","BIT-golang-2023-39325","CVE-2023-39325","GHSA-4374-p667-p6c8"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-12T09:55:31.2947259+00:00","complete":true,"records":1779,"lastAttemptAt":"2026-11-12T09:55:31.2947259+00:00","lastSuccessAt":"2026-11-12T09:55:31.4790381+00:00","error":null,"lastVerifiedAt":"2026-11-12T09:55:31.4790388+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-64752486c567b55b31fb0d7225f5222bcd0019564ac0ac5f0649e242c7b19299-96b9449de903276976deb618e1ee304842c062146e687b0fb22bdc2878e043b0","complete":true,"records":424634,"lastAttemptAt":"2026-11-12T09:53:34.7943744+00:00","lastSuccessAt":"2026-11-12T09:53:34.7689851+00:00","error":null,"lastVerifiedAt":"2026-11-12T09:53:34.7943744+00:00","snapshotPublishedAt":"2026-11-12T09:24:42+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-9db698e4659747149ec1092e3d34a5a1","complete":true,"records":13764,"lastAttemptAt":"2026-11-12T09:56:01.66177+00:00","lastSuccessAt":"2026-11-12T09:56:01.656+00:00","error":null,"lastVerifiedAt":"2026-11-12T09:56:01.656+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13817,"expectedIdentifiers":13817,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-12T09:55:31.2947259+00:00","complete":true,"records":1097,"lastAttemptAt":"2026-11-12T09:55:31.2947259+00:00","lastSuccessAt":"2026-11-12T09:55:31.4798179+00:00","error":null,"lastVerifiedAt":"2026-11-12T09:55:31.4798182+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-1a7cc780d036453fb794b7d2d385de9d","complete":false,"records":13764,"lastAttemptAt":"2026-11-12T09:55:57.1306222+00:00","lastSuccessAt":"2026-11-12T09:55:57.111+00:00","error":null,"lastVerifiedAt":"2026-11-12T09:55:57.111+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13313,"expectedIdentifiers":13817,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-3562b6c78fd1bd0f0b55daf66a0926ae24f65e462df7f6d928caad458fc696bf","complete":true,"records":9947,"lastAttemptAt":"2026-11-12T09:55:26.640208+00:00","lastSuccessAt":"2026-11-11T04:27:43.6877707+00:00","error":null,"lastVerifiedAt":"2026-11-12T09:55:26.640208+00:00","snapshotPublishedAt":"2026-11-11T03:32:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-456002455e0ab94bb92c95476d4e6d175c104cd594749982afd96c893728ecbc","complete":true,"records":2010,"lastAttemptAt":"2026-11-12T09:53:34.9350012+00:00","lastSuccessAt":"2026-11-11T02:36:58.1276999+00:00","error":null,"lastVerifiedAt":"2026-11-12T09:53:34.9350012+00:00","snapshotPublishedAt":"2026-11-11T01:17:51+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-f46f74c6a30a9b6e4cfb481719c6d35521ebec2d53ebf163223d093ae587eb9d","complete":true,"records":3106,"lastAttemptAt":"2026-11-12T09:55:31.2553322+00:00","lastSuccessAt":"2026-11-12T09:55:31.1176285+00:00","error":null,"lastVerifiedAt":"2026-11-12T09:55:31.2553322+00:00","snapshotPublishedAt":"2026-11-12T09:48:13+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-ef2ecb421099c77d2be989a707f600817e68bbc84b134f8c0b574289c6a9dbb4","complete":true,"records":231700,"lastAttemptAt":"2026-11-12T09:55:26.5140063+00:00","lastSuccessAt":"2026-11-12T09:55:25.0439596+00:00","error":null,"lastVerifiedAt":"2026-11-12T09:55:26.5140063+00:00","snapshotPublishedAt":"2026-11-12T09:33:09+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}