cri-tools vulnerabilities (Alpaquita)
11 vulnerabilities.
cri-toolsAlpaquitaHTTP/2 server crash due to HPACK encoder race in net/http7.5 Highcri-toolsAlpaquitaExcessive CPU consumption from repeated initial window changes in net/http7.5 Highcri-toolsAlpaquitaDouble flow control refund on HTTP/2 server streams in net/http9.1 Criticalcri-toolsAlpaquitaParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5 Highcri-toolsAlpaquitaInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1 Mediumcri-toolsAlpaquitaInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 Mediumcri-toolsAlpaquitaInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumcri-toolsAlpaquitaInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 Mediumcri-toolsAlpaquitaInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 Mediumcri-toolsAlpaquitaDenial of service in github.com/buger/jsonparser7.5 Highcri-toolsAlpaquitaInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical