Open Source Vulnerabilities

golang

CVE-2023-39325 affecting package golang for versions less than 1.20.7-2

jx

CVE-2023-39325 affecting package jx for versions less than 3.10.182-1

kube-vip-cloud-provider

CVE-2023-39325 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

local-path-provisioner

CVE-2023-39325 affecting package local-path-provisioner for versions less than 0.0.24-3

opa

CVE-2023-39325 affecting package opa for versions less than 0.50.2-6

packer

CVE-2023-39325 affecting package packer for versions less than 1.9.5-1

prometheus-adapter

CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1

telegraf

CVE-2023-39325 affecting package telegraf for versions less than 1.27.3-3

vitess

CVE-2023-39325 affecting package vitess for versions less than 16.0.2-5

kata-containers

CVE-2023-39325 affecting package kata-containers for versions less than 3.2.0.azl2-1

golang

CVE-2023-39325 affecting package golang for versions less than 1.21.6-1

golang

CVE-2023-39325 affecting package golang for versions less than 1.21.6-1

kata-containers-cc

CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

kata-containers

CVE-2023-39325 affecting package kata-containers for versions less than 3.2.0.azl4-1

git-lfs

CVE-2023-39325 affecting package git-lfs for versions less than 3.5.1-1

nmi

CVE-2023-39325 affecting package nmi 1.8.17-6

prometheus

CVE-2023-39325 affecting package prometheus for versions less than 2.37.9-2

multus

CVE-2023-39325 affecting package multus for versions less than 4.0.2-3

moby-containerd-cc

CVE-2023-39325 affecting package moby-containerd-cc for versions less than 1.7.1-5

go, go, go, go

golang-1.10, golang-1.18, golang-1.10, golang-1.6, golang-1.13, golang-1.10, golang-1.13, golang-1.16, golang-1.18, golang-1.8, golang-1.9, golang-1.18, golang-1.20, golang-1.21, golang-1.13, golang-1.14, golang-1.16, golang-1.17, golang-1.18, golang-1.20, golang-1.21, golang-1.13

HTTP/2 rapid reset can cause excessive work in net/http

glibc, glibc

Updated glibc packages fix a security vulnerability

golang.org/x/net

HTTP/2 rapid reset can cause excessive work in net/http

IgnoreIP/IgnoreCIDR should not trust X-Forwarded-For

vim, vim, vim

vim, vim, vim, vim, vim, vim

vim

CVE-2023-5535 affecting package vim for versions less than 9.0.2010-1

vantage6

vantage6

vim, vim

vantage6-node

vim, vim

samba

samba regression

Cachet vulnerable to Authenticated Remote Code Execution

vantage6 Improper Access Control vulnerability

Deleting a collaboration should also delete linked resources

Defining resource name as integer in vantage6 may give unintended access

Use After Free in vim/vim

vantage6

vantage6's Pickle serialization is insecure

stdlib, golang.org/x/net

HTTP/2 rapid reset can cause excessive work in net/http