Improper rendering of text nodes in golang.org/x/net/html
Published Aug 2, 2023
6.1
MEDIUMCVSS 3.1
EPSS 0.85%
Description
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.
Affected products
-
- Version 0StatusaffectedConstraints<0.13.0
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Golang.org/x/net | Golang.org/x/net/html | unaffected |
|
- < 0.13.0
No data.
Cryostat 2 on RHEL 8
cryostat-tech-preview/cryostat-rhel8-operator:2.3.1-11
Fixed · RHSA-2023:6031
LVMS-4.14-RHEL-9
lvms4/lvms-must-gather-rhel9:v4.14.1-3
Fixed · RHBA-2023:6863
LVMS-4.14-RHEL-9
lvms4/lvms-operator-bundle:v4.14.1-4
Fixed · RHBA-2023:6863
LVMS-4.14-RHEL-9
lvms4/lvms-rhel9-operator:v4.14.1-3
Fixed · RHBA-2023:6863
LVMS-4.14-RHEL-9
lvms4/topolvm-rhel9:v4.14.1-2
Fixed · RHBA-2023:6863
Migration Toolkit for Virtualization 2.4
migration-toolkit-virtualization/mtv-rhel8-operator:2.4.3-3
Fixed · RHBA-2023:6109
RHODF-4.14-RHEL-9
odf4/ocs-rhel9-operator:v4.14.0-67
Fixed · RHSA-2023:6832
Red Hat Enterprise Linux 8
container-tools:4.0-8090020230828093056.e7857ab1
Fixed · RHSA-2023:6938
Red Hat Enterprise Linux 8
container-tools:rhel8-8090020230825121312.e7857ab1
Fixed · RHSA-2023:6939
Red Hat Enterprise Linux 9
podman-2:4.6.1-5.el9
Fixed · RHSA-2023:6474
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-controller-rhel8:v1.7.13-4
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-hook-runner-rhel8:v1.7.13-3
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-legacy-rhel8-operator:v1.7.13-6
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-log-reader-rhel8:v1.7.13-3
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-must-gather-rhel8:v1.7.13-4
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-openvpn-rhel8:v1.7.13-3
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-operator-bundle:v1.7.13-3
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-registry-rhel8:v1.7.13-3
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-rhel8-operator:v1.7.13-6
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-rsync-transfer-rhel8:v1.7.13-3
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-ui-rhel8:v1.7.13-4
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-velero-plugin-for-aws-rhel8:v1.7.13-3
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8:v1.7.13-2
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.7.13-3
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-velero-restic-restore-helper-rhel8:v1.7.13-4
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-migration-velero-rhel8:v1.7.13-4
Fixed · RHSA-2023:5888
Red Hat Migration Toolkit for Containers 1.7
rhmtc/openshift-velero-plugin-rhel8:v1.7.13-3
Fixed · RHSA-2023:5888
Red Hat OpenShift Container Platform 4.12
openshift4/ose-machine-api-operator:v4.12.0-202401190520.p0.g04504fb.assembly.stream
Fixed · RHSA-2024:0485
Red Hat OpenShift Container Platform 4.14
openshift-clients-0:4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el8
Fixed · RHSA-2023:5009
Red Hat OpenShift Container Platform 4.14
openshift4/ose-aws-ebs-csi-driver-rhel8:v4.14.0-202310201027.p0.g2e2e277.assembly.stream
Fixed · RHSA-2023:5006
Red Hat OpenShift Container Platform 4.14
openshift4/ose-aws-efs-csi-driver-container-rhel8:v4.14.0-202310201027.p0.g66925fd.assembly.stream
Fixed · RHSA-2023:5007
Red Hat OpenShift Container Platform 4.14
openshift4/ose-azure-cluster-api-controllers-rhel8:v4.14.0-202311021650.p0.g7ad2773.assembly.stream
Fixed · RHSA-2023:6837
Red Hat OpenShift Container Platform 4.14
openshift4/ose-azure-disk-csi-driver-rhel8:v4.14.0-202310201027.p0.gb19eec1.assembly.stream
Fixed · RHSA-2023:5006
Red Hat OpenShift Container Platform 4.14
openshift4/ose-azure-file-csi-driver-rhel8:v4.14.0-202310201027.p0.gf401f53.assembly.stream
Fixed · RHSA-2023:5006
Red Hat OpenShift Container Platform 4.14
openshift4/ose-baremetal-machine-controllers:v4.14.0-202310201027.p0.g412acb3.assembly.stream
Fixed · RHSA-2023:5006
Red Hat OpenShift Container Platform 4.14
openshift4/ose-cluster-network-operator:v4.14.0-202310201027.p0.g5572bce.assembly.stream
Fixed · RHSA-2023:5006
Red Hat OpenShift Container Platform 4.14
openshift4/ose-cluster-node-tuning-operator:v4.14.0-202310201027.p0.ga91f994.assembly.stream
Fixed · RHSA-2023:5006
Red Hat OpenShift Container Platform 4.14
openshift4/ose-csi-external-provisioner-rhel8:v4.14.0-202310201027.p0.g78a710f.assembly.stream
Fixed · RHSA-2023:5007
Red Hat OpenShift Container Platform 4.14
openshift4/ose-csi-external-provisioner:v4.14.0-202310201027.p0.g78a710f.assembly.stream
Fixed · RHSA-2023:5007
Red Hat OpenShift Container Platform 4.14
openshift4/ose-gcp-cluster-api-controllers-rhel8:v4.14.0-202311080350.p0.gd99fb31.assembly.stream
Fixed · RHSA-2023:7315
Red Hat OpenShift Container Platform 4.14
openshift4/ose-kubevirt-cloud-controller-manager-rhel8:v4.14.0-202404161544.p0.g7d96f56.assembly.stream.el8
Fixed · RHSA-2024:1891
Red Hat OpenShift Container Platform 4.14
openshift4/ose-local-storage-operator:v4.14.0-202310201027.p0.gc41b6ba.assembly.stream
Fixed · RHSA-2023:5007
Red Hat OpenShift Container Platform 4.14
openshift4/ose-machine-api-operator:v4.14.0-202311130809.p0.ge8e6a66.assembly.stream
Fixed · RHSA-2023:7315
Red Hat OpenShift Container Platform 4.14
openshift4/ose-machine-api-provider-aws-rhel8:v4.14.0-202311021650.p0.ge292817.assembly.stream
Fixed · RHSA-2023:6837
Red Hat OpenShift Container Platform 4.14
openshift4/ose-machine-api-provider-azure-rhel8:v4.14.0-202311021650.p0.gb6ab233.assembly.stream
Fixed · RHSA-2023:6837
Red Hat OpenShift Container Platform 4.14
openshift4/ose-machine-api-provider-gcp-rhel8:v4.14.0-202310201027.p0.ga676e6b.assembly.stream
Fixed · RHSA-2023:5006
Red Hat OpenShift Container Platform 4.14
openshift4/ose-nutanix-cloud-controller-manager-rhel8:v4.14.0-202411261536.p0.g8aa09cd.assembly.stream.el8
Fixed · RHSA-2024:10523
Red Hat OpenShift Container Platform 4.14
openshift4/ose-nutanix-machine-controllers-rhel8:v4.14.0-202411261536.p0.g8acc076.assembly.stream.el8
Fixed · RHSA-2024:10523
Red Hat OpenShift Container Platform 4.14
openshift4/ose-powervs-block-csi-driver-rhel8:v4.14.0-202310201027.p0.ge9694ce.assembly.stream
Fixed · RHSA-2023:5006
Red Hat OpenShift Container Platform 4.14
openshift4/ose-vsphere-cluster-api-controllers-rhel8:v4.14.0-202311021650.p0.g72e998c.assembly.stream
Fixed · RHSA-2023:6837
Red Hat OpenShift Container Platform 4.14
openshift4/ose-vsphere-csi-driver-syncer-rhel8:v4.14.0-202310201027.p0.ga5ed57f.assembly.stream
Fixed · RHSA-2023:5006
Red Hat OpenShift Container Platform 4.14
podman-3:4.4.1-11.2.rhaos4.14.el8
Fixed · RHSA-2024:0944
Red Hat OpenShift Container Platform 4.15
openshift4/ose-alibaba-cloud-controller-manager-rhel9:v4.15.0-202401261531.p0.gabf4fa9.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-aws-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.g3e23a96.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-azure-cloud-node-manager-rhel9:v4.15.0-202401261531.p0.g5beac87.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-azure-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.g84ef752.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-cluster-api-rhel9:v4.15.0-202401261531.p0.gdb1841a.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-cluster-capi-rhel9-operator:v4.15.0-202402020339.p0.g6a24e09.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-cluster-control-plane-machine-set-rhel9-operator:v4.15.0-202401261531.p0.gd3e0fe7.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-cluster-kube-cluster-api-rhel9-operator:v4.15.0-202402141438.p0.g128d8e0.assembly.stream.el9
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-gcp-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.g8a32c37.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-ibmcloud-machine-controllers-rhel9:v4.15.0-202401261531.p0.g6b0b8ea.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-machine-api-provider-aws-rhel9:v4.15.0-202401261531.p0.g0129b1e.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-machine-api-provider-azure-rhel9:v4.15.0-202402070237.p0.g34e8ac0.assembly.stream.el9
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-machine-api-provider-gcp-rhel9:v4.15.0-202401261531.p0.gb15daaf.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-machine-api-rhel9-operator:v4.15.0-202402020339.p0.ge2b4537.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Container Platform 4.15
openshift4/ose-sriov-network-webhook-rhel9:v4.15.0-202401261531.p0.g00e0317.assembly.stream
Fixed · RHSA-2023:7197
Red Hat OpenShift Container Platform 4.15
openshift4/ose-vsphere-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.gb21c0ba.assembly.stream
Fixed · RHSA-2023:7198
Red Hat OpenShift Service Mesh 2.4 for RHEL 8
openshift-service-mesh/istio-cni-rhel8:2.4.5-2
Fixed · RHSA-2023:7216
Logging Subsystem for Red Hat OpenShift
openshift-logging/cluster-logging-rhel8-operator
Not affected
Logging Subsystem for Red Hat OpenShift
openshift-logging/elasticsearch-proxy-rhel8
Not affected
Logging Subsystem for Red Hat OpenShift
openshift-logging/elasticsearch-rhel8-operator
Not affected
Logging Subsystem for Red Hat OpenShift
openshift-logging/lokistack-gateway-rhel8
Not affected
OpenShift API for Data Protection
oadp/oadp-rhel9-operator
Will not fix
OpenShift API for Data Protection
oadp/oadp-velero-rhel9
Will not fix
OpenShift Developer Tools and Services
odo
Fix deferred
OpenShift Pipelines
openshift-pipelines-client
Affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/subctl-rhel9
Affected
Red Hat Advanced Cluster Security 3
advanced-cluster-security/rhacs-scanner-rhel8
Will not fix
Red Hat Advanced Cluster Security 4
advanced-cluster-security/rhacs-main-rhel8
Affected
Red Hat Advanced Cluster Security 4
advanced-cluster-security/rhacs-scanner-rhel8
Not affected
Red Hat Ansible Automation Platform 1.2
openshift-clients
Out of support scope
Red Hat Ansible Automation Platform 2
openshift-clients
Affected
Red Hat Certification Program for Red Hat Enterprise Linux 9
redhat-certification-cnf
Out of support scope
Red Hat Certification for Red Hat Enterprise Linux 8
redhat-certification-cnf
Out of support scope
Red Hat Enterprise Linux 7
podman
Out of support scope
Red Hat Enterprise Linux 8
osbuild-composer
Will not fix
Red Hat Enterprise Linux 9
osbuild-composer
Will not fix
Red Hat OpenShift Container Platform 3.11
ansible-service-broker
Out of support scope
Red Hat OpenShift Container Platform 3.11
atomic-enterprise-service-catalog
Out of support scope
Red Hat OpenShift Container Platform 3.11
atomic-openshift
Out of support scope
Red Hat OpenShift Container Platform 3.11
atomic-openshift-descheduler
Out of support scope
Red Hat OpenShift Container Platform 3.11
atomic-openshift-service-idler
Out of support scope
Red Hat OpenShift Container Platform 3.11
atomic-openshift-web-console
Out of support scope
Red Hat OpenShift Container Platform 3.11
golang-github-openshift-oauth-proxy
Out of support scope
Red Hat OpenShift Container Platform 3.11
openshift-enterprise-cluster-capacity
Out of support scope
Red Hat OpenShift Container Platform 4
atomic-openshift-service-idler
Not affected
Red Hat OpenShift Container Platform 4
cri-o
Not affected
Red Hat OpenShift Container Platform 4
cri-tools
Not affected
Red Hat OpenShift Container Platform 4
microshift
Will not fix
Red Hat OpenShift Container Platform 4
openshift
Will not fix
Red Hat OpenShift Container Platform 4
openshift-compliance-openscap-container
Affected
Red Hat OpenShift Container Platform 4
openshift-selinuxd-container
Affected
Red Hat OpenShift Container Platform 4
openshift-tech-preview/metallb-rhel8
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/cloud-event-proxy-rhel8
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/cnf-tests-rhel8
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ingress-node-firewall
Not affected
Red Hat OpenShift Container Platform 4
openshift4/kubernetes-nmstate-rhel9-operator
Affected
Red Hat OpenShift Container Platform 4
openshift4/metallb-rhel8
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/metallb-rhel8-operator
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-agent-installer-api-server-rhel8
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-agent-installer-csr-approver-rhel9
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-agent-installer-node-agent-rhel9
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-alibaba-machine-controllers-rhel9
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-cloud-event-proxy
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-cloud-event-proxy-rhel8
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-csi-driver-manila-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-csi-driver-nfs-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-hypershift-rhel9
Affected
Red Hat OpenShift Container Platform 4
openshift4/ose-ibmcloud-cluster-api-controllers-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-installer
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-libvirt-machine-controllers
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-machine-api-provider-openstack-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-multus-cni
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-network-metrics-daemon-rhel8
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-node-feature-discovery
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-oauth-proxy
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-openshift-apiserver-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-openstack-machine-controllers
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-operator-sdk-rhel8
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-ovirt-machine-controllers-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-powervs-machine-controllers-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-ptp-rhel9-operator
Will not fix
Red Hat OpenShift Container Platform 4
openshift4/ose-tests
Affected
Red Hat OpenShift Container Platform 4
openshift4/ztp-site-generate-rhel8
Affected
Red Hat OpenShift Container Platform Assisted Installer 1
rhai-tech-preview/assisted-installer-agent-rhel8
Not affected
Red Hat OpenShift Container Platform Assisted Installer 1
rhai-tech-preview/assisted-installer-rhel8
Not affected
Red Hat OpenShift Data Science (RHODS)
rhods/odh-data-science-pipelines-operator-controller-rhel8
Will not fix
Red Hat OpenShift Data Science (RHODS)
rhods/odh-modelmesh-serving-controller-rhel8
Will not fix
Red Hat OpenShift Dev Spaces
devspaces/devspaces-rhel8-operator
Affected
Red Hat OpenShift Dev Spaces
devspaces/udi-rhel8
Will not fix
Red Hat OpenShift Virtualization 4
kubevirt
Affected
Red Hat OpenShift Virtualization 4
openshift-golang-builder-container
Affected
Red Hat OpenShift on AWS
rosa
Will not fix
Red Hat OpenStack Platform 18.0
rhoso-operators/rabbitmq-cluster-rhel9-operator
Not affected
Red Hat Openshift Container Storage 4
ocs4/ocs-rhel8-operator
Out of support scope
Red Hat Openshift Data Foundation 4
odf4/cephcsi-rhel9
Affected
Red Hat Openshift Data Foundation 4
odf4/odf-rhel9-operator
Affected
Self Node Remediation Operator
workload-availability/self-node-remediation-rhel8-operator
Affected
cert-manager Operator for Red Hat OpenShift
cert-manager/jetstack-cert-manager-rhel9
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Cryostat 2 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8-operator:2.3.1-11 | Fixed | RHSA-2023:6031 |
| LVMS-4.14-RHEL-9 | lvms4/lvms-must-gather-rhel9:v4.14.1-3 | Fixed | RHBA-2023:6863 |
| LVMS-4.14-RHEL-9 | lvms4/lvms-operator-bundle:v4.14.1-4 | Fixed | RHBA-2023:6863 |
| LVMS-4.14-RHEL-9 | lvms4/lvms-rhel9-operator:v4.14.1-3 | Fixed | RHBA-2023:6863 |
| LVMS-4.14-RHEL-9 | lvms4/topolvm-rhel9:v4.14.1-2 | Fixed | RHBA-2023:6863 |
| Migration Toolkit for Virtualization 2.4 | migration-toolkit-virtualization/mtv-rhel8-operator:2.4.3-3 | Fixed | RHBA-2023:6109 |
| RHODF-4.14-RHEL-9 | odf4/ocs-rhel9-operator:v4.14.0-67 | Fixed | RHSA-2023:6832 |
| Red Hat Enterprise Linux 8 | container-tools:4.0-8090020230828093056.e7857ab1 | Fixed | RHSA-2023:6938 |
| Red Hat Enterprise Linux 8 | container-tools:rhel8-8090020230825121312.e7857ab1 | Fixed | RHSA-2023:6939 |
| Red Hat Enterprise Linux 9 | podman-2:4.6.1-5.el9 | Fixed | RHSA-2023:6474 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-controller-rhel8:v1.7.13-4 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-hook-runner-rhel8:v1.7.13-3 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-legacy-rhel8-operator:v1.7.13-6 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-log-reader-rhel8:v1.7.13-3 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-must-gather-rhel8:v1.7.13-4 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-openvpn-rhel8:v1.7.13-3 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-operator-bundle:v1.7.13-3 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-registry-rhel8:v1.7.13-3 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-rhel8-operator:v1.7.13-6 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-rsync-transfer-rhel8:v1.7.13-3 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-ui-rhel8:v1.7.13-4 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8:v1.7.13-3 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8:v1.7.13-2 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.7.13-3 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8:v1.7.13-4 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-migration-velero-rhel8:v1.7.13-4 | Fixed | RHSA-2023:5888 |
| Red Hat Migration Toolkit for Containers 1.7 | rhmtc/openshift-velero-plugin-rhel8:v1.7.13-3 | Fixed | RHSA-2023:5888 |
| Red Hat OpenShift Container Platform 4.12 | openshift4/ose-machine-api-operator:v4.12.0-202401190520.p0.g04504fb.assembly.stream | Fixed | RHSA-2024:0485 |
| Red Hat OpenShift Container Platform 4.14 | openshift-clients-0:4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el8 | Fixed | RHSA-2023:5009 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-aws-ebs-csi-driver-rhel8:v4.14.0-202310201027.p0.g2e2e277.assembly.stream | Fixed | RHSA-2023:5006 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-aws-efs-csi-driver-container-rhel8:v4.14.0-202310201027.p0.g66925fd.assembly.stream | Fixed | RHSA-2023:5007 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-azure-cluster-api-controllers-rhel8:v4.14.0-202311021650.p0.g7ad2773.assembly.stream | Fixed | RHSA-2023:6837 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-azure-disk-csi-driver-rhel8:v4.14.0-202310201027.p0.gb19eec1.assembly.stream | Fixed | RHSA-2023:5006 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-azure-file-csi-driver-rhel8:v4.14.0-202310201027.p0.gf401f53.assembly.stream | Fixed | RHSA-2023:5006 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-baremetal-machine-controllers:v4.14.0-202310201027.p0.g412acb3.assembly.stream | Fixed | RHSA-2023:5006 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-network-operator:v4.14.0-202310201027.p0.g5572bce.assembly.stream | Fixed | RHSA-2023:5006 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-node-tuning-operator:v4.14.0-202310201027.p0.ga91f994.assembly.stream | Fixed | RHSA-2023:5006 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-csi-external-provisioner-rhel8:v4.14.0-202310201027.p0.g78a710f.assembly.stream | Fixed | RHSA-2023:5007 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-csi-external-provisioner:v4.14.0-202310201027.p0.g78a710f.assembly.stream | Fixed | RHSA-2023:5007 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-gcp-cluster-api-controllers-rhel8:v4.14.0-202311080350.p0.gd99fb31.assembly.stream | Fixed | RHSA-2023:7315 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-kubevirt-cloud-controller-manager-rhel8:v4.14.0-202404161544.p0.g7d96f56.assembly.stream.el8 | Fixed | RHSA-2024:1891 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-local-storage-operator:v4.14.0-202310201027.p0.gc41b6ba.assembly.stream | Fixed | RHSA-2023:5007 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-api-operator:v4.14.0-202311130809.p0.ge8e6a66.assembly.stream | Fixed | RHSA-2023:7315 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-api-provider-aws-rhel8:v4.14.0-202311021650.p0.ge292817.assembly.stream | Fixed | RHSA-2023:6837 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-api-provider-azure-rhel8:v4.14.0-202311021650.p0.gb6ab233.assembly.stream | Fixed | RHSA-2023:6837 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-api-provider-gcp-rhel8:v4.14.0-202310201027.p0.ga676e6b.assembly.stream | Fixed | RHSA-2023:5006 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-nutanix-cloud-controller-manager-rhel8:v4.14.0-202411261536.p0.g8aa09cd.assembly.stream.el8 | Fixed | RHSA-2024:10523 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-nutanix-machine-controllers-rhel8:v4.14.0-202411261536.p0.g8acc076.assembly.stream.el8 | Fixed | RHSA-2024:10523 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-powervs-block-csi-driver-rhel8:v4.14.0-202310201027.p0.ge9694ce.assembly.stream | Fixed | RHSA-2023:5006 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-vsphere-cluster-api-controllers-rhel8:v4.14.0-202311021650.p0.g72e998c.assembly.stream | Fixed | RHSA-2023:6837 |
| Red Hat OpenShift Container Platform 4.14 | openshift4/ose-vsphere-csi-driver-syncer-rhel8:v4.14.0-202310201027.p0.ga5ed57f.assembly.stream | Fixed | RHSA-2023:5006 |
| Red Hat OpenShift Container Platform 4.14 | podman-3:4.4.1-11.2.rhaos4.14.el8 | Fixed | RHSA-2024:0944 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-alibaba-cloud-controller-manager-rhel9:v4.15.0-202401261531.p0.gabf4fa9.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-aws-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.g3e23a96.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-azure-cloud-node-manager-rhel9:v4.15.0-202401261531.p0.g5beac87.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-azure-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.g84ef752.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-api-rhel9:v4.15.0-202401261531.p0.gdb1841a.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-capi-rhel9-operator:v4.15.0-202402020339.p0.g6a24e09.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-control-plane-machine-set-rhel9-operator:v4.15.0-202401261531.p0.gd3e0fe7.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-kube-cluster-api-rhel9-operator:v4.15.0-202402141438.p0.g128d8e0.assembly.stream.el9 | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-gcp-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.g8a32c37.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ibmcloud-machine-controllers-rhel9:v4.15.0-202401261531.p0.g6b0b8ea.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-api-provider-aws-rhel9:v4.15.0-202401261531.p0.g0129b1e.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-api-provider-azure-rhel9:v4.15.0-202402070237.p0.g34e8ac0.assembly.stream.el9 | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-api-provider-gcp-rhel9:v4.15.0-202401261531.p0.gb15daaf.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-api-rhel9-operator:v4.15.0-202402020339.p0.ge2b4537.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-sriov-network-webhook-rhel9:v4.15.0-202401261531.p0.g00e0317.assembly.stream | Fixed | RHSA-2023:7197 |
| Red Hat OpenShift Container Platform 4.15 | openshift4/ose-vsphere-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.gb21c0ba.assembly.stream | Fixed | RHSA-2023:7198 |
| Red Hat OpenShift Service Mesh 2.4 for RHEL 8 | openshift-service-mesh/istio-cni-rhel8:2.4.5-2 | Fixed | RHSA-2023:7216 |
| Logging Subsystem for Red Hat OpenShift | openshift-logging/cluster-logging-rhel8-operator | Not affected | n/a |
| Logging Subsystem for Red Hat OpenShift | openshift-logging/elasticsearch-proxy-rhel8 | Not affected | n/a |
| Logging Subsystem for Red Hat OpenShift | openshift-logging/elasticsearch-rhel8-operator | Not affected | n/a |
| Logging Subsystem for Red Hat OpenShift | openshift-logging/lokistack-gateway-rhel8 | Not affected | n/a |
| OpenShift API for Data Protection | oadp/oadp-rhel9-operator | Will not fix | n/a |
| OpenShift API for Data Protection | oadp/oadp-velero-rhel9 | Will not fix | n/a |
| OpenShift Developer Tools and Services | odo | Fix deferred | n/a |
| OpenShift Pipelines | openshift-pipelines-client | Affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/subctl-rhel9 | Affected | n/a |
| Red Hat Advanced Cluster Security 3 | advanced-cluster-security/rhacs-scanner-rhel8 | Will not fix | n/a |
| Red Hat Advanced Cluster Security 4 | advanced-cluster-security/rhacs-main-rhel8 | Affected | n/a |
| Red Hat Advanced Cluster Security 4 | advanced-cluster-security/rhacs-scanner-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 1.2 | openshift-clients | Out of support scope | n/a |
| Red Hat Ansible Automation Platform 2 | openshift-clients | Affected | n/a |
| Red Hat Certification Program for Red Hat Enterprise Linux 9 | redhat-certification-cnf | Out of support scope | n/a |
| Red Hat Certification for Red Hat Enterprise Linux 8 | redhat-certification-cnf | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | podman | Out of support scope | n/a |
| Red Hat Enterprise Linux 8 | osbuild-composer | Will not fix | n/a |
| Red Hat Enterprise Linux 9 | osbuild-composer | Will not fix | n/a |
| Red Hat OpenShift Container Platform 3.11 | ansible-service-broker | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 3.11 | atomic-enterprise-service-catalog | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 3.11 | atomic-openshift | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 3.11 | atomic-openshift-descheduler | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 3.11 | atomic-openshift-service-idler | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 3.11 | atomic-openshift-web-console | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 3.11 | golang-github-openshift-oauth-proxy | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 3.11 | openshift-enterprise-cluster-capacity | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 4 | atomic-openshift-service-idler | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | cri-o | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | cri-tools | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | microshift | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift-compliance-openscap-container | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift-selinuxd-container | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift-tech-preview/metallb-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/cloud-event-proxy-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/cnf-tests-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ingress-node-firewall | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/kubernetes-nmstate-rhel9-operator | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/metallb-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/metallb-rhel8-operator | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-agent-installer-api-server-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-agent-installer-csr-approver-rhel9 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-agent-installer-node-agent-rhel9 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-alibaba-machine-controllers-rhel9 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-cloud-event-proxy | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-cloud-event-proxy-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-csi-driver-manila-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-csi-driver-nfs-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-hypershift-rhel9 | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-ibmcloud-cluster-api-controllers-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-installer | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-libvirt-machine-controllers | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-machine-api-provider-openstack-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-multus-cni | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-network-metrics-daemon-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-node-feature-discovery | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-oauth-proxy | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-openshift-apiserver-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-openstack-machine-controllers | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-operator-sdk-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-ovirt-machine-controllers-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-powervs-machine-controllers-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-ptp-rhel9-operator | Will not fix | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-tests | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ztp-site-generate-rhel8 | Affected | n/a |
| Red Hat OpenShift Container Platform Assisted Installer 1 | rhai-tech-preview/assisted-installer-agent-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform Assisted Installer 1 | rhai-tech-preview/assisted-installer-rhel8 | Not affected | n/a |
| Red Hat OpenShift Data Science (RHODS) | rhods/odh-data-science-pipelines-operator-controller-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Data Science (RHODS) | rhods/odh-modelmesh-serving-controller-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Dev Spaces | devspaces/devspaces-rhel8-operator | Affected | n/a |
| Red Hat OpenShift Dev Spaces | devspaces/udi-rhel8 | Will not fix | n/a |
| Red Hat OpenShift Virtualization 4 | kubevirt | Affected | n/a |
| Red Hat OpenShift Virtualization 4 | openshift-golang-builder-container | Affected | n/a |
| Red Hat OpenShift on AWS | rosa | Will not fix | n/a |
| Red Hat OpenStack Platform 18.0 | rhoso-operators/rabbitmq-cluster-rhel9-operator | Not affected | n/a |
| Red Hat Openshift Container Storage 4 | ocs4/ocs-rhel8-operator | Out of support scope | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/cephcsi-rhel9 | Affected | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/odf-rhel9-operator | Affected | n/a |
| Self Node Remediation Operator | workload-availability/self-node-remediation-rhel8-operator | Affected | n/a |
| cert-manager Operator for Red Hat OpenShift | cert-manager/jetstack-cert-manager-rhel9 | Not affected | n/a |
golang.org/x/net
Go
Introduced 0 Fixed 0.13.0
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | golang.org/x/net | 0 | 0.13.0 |
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
PartialDecision
n/aAssessed Sep 27, 2024 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2023–2026- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (8 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.85% (0.00851) | 56.68th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.84% (0.00843) | 52.99th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.62% (0.00619) | 68.19th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.08% (0.00079) | 36.05th | v3 (v2023.03.01) |
| Jul 2, 2024 | 0.06% (0.00056) | 23.71th | v3 (v2023.03.01) |
| Jun 6, 2024 | 0.05% (0.00052) | 20.36th | v3 (v2023.03.01) |
| Aug 8, 2023 | 0.05% (0.00052) | 18.34th | v3 (v2023.03.01) |
| Aug 3, 2023 | 0.04% (0.00045) | 12.28th | v3 (v2023.03.01) |
References (8)
- https://access.redhat.com/security/cve/CVE-2023-3978 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2228689 Issue Tracking
- https://github.com/advisories/GHSA-2wrh-6pvc-2jm9 Advisory
- https://go.dev/cl/514896 Patch
- https://go.dev/issue/61615 Issue TrackingPatchVendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-3978
- https://pkg.go.dev/vuln/GO-2023-1988 Issue TrackingPatchVendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-3978
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2023-3978 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2228689 | Issue Tracking | |
| https://github.com/advisories/GHSA-2wrh-6pvc-2jm9 | Advisory | |
| https://go.dev/cl/514896 | Patch | |
| https://go.dev/issue/61615 | Issue TrackingPatchVendor Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2023-3978 | ||
| https://pkg.go.dev/vuln/GO-2023-1988 | Issue TrackingPatchVendor Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2023-3978 |
Change history (0)
No recorded changes yet.