git-lfs vulnerabilities (AlmaLinux)
47 vulnerabilities.
-
git-lfsAlmaLinux Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
git-lfsAlmaLinux Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
git-lfsAlmaLinux Enforce maximum recursion depth in encoding/asn1 7.5 High -
git-lfsAlmaLinux Invoking Encrypted Client Hello privacy leak in crypto/tls 5.3 Medium -
git-lfsAlmaLinux Arbitrary inputs are included in errors without any escaping in net/textproto 5.3 Medium -
git-lfsAlmaLinux Crash when handling long CNAME response in net 7.5 High -
git-lfsAlmaLinux Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 8.2 High -
git-lfsAlmaLinux Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
git-lfsAlmaLinux TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
git-lfsAlmaLinux Inefficient policy validation in crypto/x509 7.5 High -
git-lfsAlmaLinux Unexpected work during chain building in crypto/x509 7.5 High -
git-lfsAlmaLinux Incorrect parsing of IPv6 host literals in net/url 7.5 High -
git-lfsAlmaLinux Unexpected session resumption in crypto/tls 10.0 Critical -
git-lfsAlmaLinux Memory exhaustion in query parameter parsing in net/url 7.5 High -
git-lfsAlmaLinux Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
git-lfsAlmaLinux Git LFS may write to arbitrary files via crafted symlinks 8.6 High -
git-lfsAlmaLinux Unexpected paths returned from LookPath in os/exec 6.5 Medium -
git-lfsAlmaLinux Sensitive headers not cleared on cross-origin redirect in net/http 6.8 Medium -
git-lfsAlmaLinux Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
git-lfsAlmaLinux Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 6.1 Medium -
git-lfsAlmaLinux Git LFS permits exfiltration of credentials via crafted HTTP URLs 8.5 High -
git-lfsAlmaLinux Golang-fips: golang fips zeroed buffer 6.5 Medium -
git-lfsAlmaLinux Stack exhaustion in Decoder.Decode in encoding/gob 7.5 High -
git-lfsAlmaLinux Denial of service due to improper 100-continue handling in net/http 7.5 High -
git-lfsAlmaLinux Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip 9.8 Critical -
git-lfsAlmaLinux Malformed DNS message can cause infinite loop in net 5.9 Medium -
git-lfsAlmaLinux HTTP/2 CONTINUATION flood in net/http 7.5 High -
git-lfsAlmaLinux Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http 4.3 Medium -
git-lfsAlmaLinux Memory exhaustion in multipart form parsing in net/textproto and net/http 6.5 Medium -
git-lfsAlmaLinux Verify panics on certificates with an unknown public key algorithm in crypto/x509 5.9 Medium -
git-lfsAlmaLinux Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
git-lfsAlmaLinux Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High -
git-lfsAlmaLinux Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
git-lfsAlmaLinux Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
git-lfsAlmaLinux Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
git-lfsAlmaLinux golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
git-lfsAlmaLinux Panic when decoding Float and Rat types in math/big 7.5 High -
git-lfsAlmaLinux Exposure of client IP addresses in net/http 6.5 Medium -
git-lfsAlmaLinux Stack exhaustion when decoding certain messages in encoding/gob 7.5 High -
git-lfsAlmaLinux Stack exhaustion on crafted paths in path/filepath 7.5 High -
git-lfsAlmaLinux Stack exhaustion in Glob on certain paths in io/fs 7.5 High -
git-lfsAlmaLinux Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
git-lfsAlmaLinux git-lfs bug fix and enhancement update No score -
git-lfsAlmaLinux In x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language... 7.5 High -
git-lfsAlmaLinux In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage... 7.5 High -
git-lfsAlmaLinux git-lfs bug fix and enhancement update No score -
git-lfsAlmaLinux Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical