Open Source Vulnerabilities

golang.org/x/net

Improper rendering of text nodes in golang.org/x/net/html

golang.org/x/image

Golang TIFF decoder vulnerable to excessive CPU consumption

golang.org/x/image

Golang TIFF decoder does not place a limit on the size of compressed tile data

golang-golang-x-net, golang-golang-x-net, golang-golang-x-net

multus

CVE-2023-3978 affecting package multus for versions less than 4.0.2-2

cert-manager

CVE-2023-3978 affecting package cert-manager for versions less than 1.11.2-14

kubevirt

CVE-2023-3978 affecting package kubevirt for versions less than 0.59.0-24

vitess

CVE-2023-3978 affecting package vitess for versions less than 17.0.7-1

telegraf

CVE-2023-3978 affecting package telegraf for versions less than 1.27.4-1

cni-plugins

CVE-2023-3978 affecting package cni-plugins for versions less than 1.3.0-6

multus

CVE-2023-3978 affecting package multus for versions less than 4.0.2-5

packer

CVE-2023-3978 affecting package packer for versions less than 1.9.5-3

application-gateway-kubernetes-ingress

CVE-2023-3978 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-1

cert-manager

CVE-2023-3978 affecting package cert-manager for versions less than 1.12.12-1

containerized-data-importer

CVE-2023-3978 affecting package containerized-data-importer for versions less than 1.57.0-12

kubevirt

CVE-2023-3978 affecting package kubevirt for versions less than 1.2.0-1

prometheus-adapter

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1

telegraf

CVE-2023-3978 affecting package telegraf for versions less than 1.29.4-1

vitess

CVE-2023-3978 affecting package vitess for versions less than 19.0.4-2

podman

CVE-2023-3978 affecting package podman 4.1.1-26

podman

CVE-2023-3978 affecting package podman for versions less than 5.6.1-2

golang-1.19

golang-golang-x-image, golang-golang-x-image, golang-golang-x-image

golang-golang-x-image, golang-golang-x-image, golang-golang-x-image

golang

CVE-2023-29409 affecting package golang 1.27.1-1

golang

CVE-2023-29409 affecting package golang for versions less than 1.20.7-1

msft-golang

CVE-2023-29409 affecting package msft-golang for versions less than 1.20.7-1

golang

CVE-2023-29409 affecting package golang for versions less than 1.21.6-1

golang

CVE-2023-29409 affecting package golang for versions less than 1.21.6-1

golang

CVE-2023-29409 affecting package golang for versions less than 1.20.7-1

golang

CVE-2023-29409 affecting package golang 1.25.7-1

golang-golang-x-net-dev, juju-core, lxd, lxd, golang-golang-x-net-dev, adsys, golang-golang-x-net-dev, golang-golang-x-net

golang-golang-x-image, golang-golang-x-image, golang-golang-x-image, golang-golang-x-image, golang-golang-x-image, golang-golang-x-image

golang-golang-x-image, golang-golang-x-image, golang-golang-x-image, golang-golang-x-image, golang-golang-x-image, golang-golang-x-image

golang-1.20, golang-1.20

Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff

Excessive resource consumption in golang.org/x/image/tiff

Improper rendering of text nodes in golang.org/x/net/html

Large RSA keys can cause high CPU usage in crypto/tls

drupal/matomo

stdlib

Large RSA keys can cause high CPU usage in crypto/tls

gst-plugins-good1.0, gst-plugins-good1.0

gst-plugins-good1.0 vulnerability