Kubernetes Monitoring Operator (Netapp) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-04-20. Vendor: Netapp.

CVEs of Kubernetes Monitoring Operator

• CVE-2022-24675 - CVSS 7.5 (high), 2022-04-20: encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
• CVE-2022-23806 - CVSS 9.1 (critical), 2022-02-11: Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a…
• CVE-2022-23773 - CVSS 7.5 (high), 2022-02-11: cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access…
• CVE-2022-23772 - CVSS 7.5 (high), 2022-02-11: Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.