Description
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
github.com/go-viper/mapstructure/v2
Default version status: unaffected
0 to < 2.4.0affected
Red Hat OpenShift Pipelines
Default version status: affected
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
Default version status: affected
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Certification for Red Hat Enterprise Linux 8
Default version status: affected
Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
Default version status: affected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
Red Hat Red Hat OpenShift AI (RHOAI)
Default version status: affected
Red Hat Red Hat OpenShift AI (RHOAI)
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Dev Spaces
Default version status: affected
Red Hat Red Hat OpenShift Dev Spaces
Default version status: unaffected
Red Hat Red Hat OpenShift Dev Spaces
Default version status: unaffected
Red Hat Red Hat OpenShift distributed tracing 3
Default version status: affected
Red Hat Red Hat OpenShift GitOps
Default version status: affected
Red Hat Red Hat OpenShift GitOps
Default version status: affected
Red Hat Red Hat Trusted Application Pipeline
Default version status: affected
Red Hat Red Hat Trusted Artifact Signer
Default version status: affected
Red Hat Red Hat Trusted Artifact Signer
Default version status: affected
Red Hat Red Hat Trusted Artifact Signer
Default version status: affected
Red Hat Red Hat Trusted Artifact Signer
Default version status: affected
Red Hat Red Hat Trusted Artifact Signer
Default version status: affected
Red Hat Red Hat Trusted Artifact Signer
Default version status: affected
Red Hat Red Hat Trusted Artifact Signer
Default version status: affected
Red Hat Zero Trust Workload Identity Manager - Tech Preview
Default version status: affected
Red Hat Zero Trust Workload Identity Manager - Tech Preview
Default version status: affected
Red Hat Zero Trust Workload Identity Manager - Tech Preview
Default version status: affected
Red Hat Zero Trust Workload Identity Manager - Tech Preview
Default version status: affected