github.com/openshift/origin (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/openshift/origin, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2016-1906 — CVSS 9.8 (critical): Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that…
• CVE-2015-3207 — CVSS 5.3 (medium): In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
• CVE-2015-5250 — CVSS 4.0 (medium): The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.