title: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.15.0 release
description: go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents prometheus/client_golang: Denial of service using InstrumentHandlerCounter golang-gopkg-yaml: crash when attempting to deserialize invalid input json5: Prototype Pollution in JSON5 via Parse Method logback: serialization vulnerability in logback receiver golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) tomcat: Open Redirect vulnerability in FORM authentication HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS tomcat: incorrectly parsed http trailer headers can cause request smuggling
cpes: cpe:/a:redhat:openshift_devspaces:3::el8