title: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.5 security updates and bug fixes
description: golang.org/x/crypto: empty plaintext packet causes panic nconf: Prototype pollution in memory store golang: crypto/elliptic: IsOnCurve returns true for invalid field elements nats-server: misusing the "dynamically provisioned sandbox accounts" feature  authenticated user can obtain the privileges of the System account Moment.js: Path traversal  in moment.locale dset: Prototype Pollution in dset golang: syscall: faccessat checks wrong group go-getter: writes SSH credentials into logfile, exposing sensitive credentials to local uses
cpes: cpe:/a:redhat:acm:2.4::el8