grype vulnerabilities (Alpaquita)
33 vulnerabilities.
grypeAlpaquitaHTTP/2 server crash due to HPACK encoder race in net/http7.5 HighgrypeAlpaquitaExcessive CPU consumption from repeated initial window changes in net/http7.5 HighgrypeAlpaquitaDouble flow control refund on HTTP/2 server streams in net/http9.1 CriticalgrypeAlpaquitaSource-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh7.5 HighgrypeAlpaquitaParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5 HighgrypeAlpaquitaInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1 MediumgrypeAlpaquitaInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 MediumgrypeAlpaquitaInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 MediumgrypeAlpaquitaInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 MediumgrypeAlpaquitaInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 MediumgrypeAlpaquitaInvoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent5.3 MediumgrypeAlpaquitaInvoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh7.5 HighgrypeAlpaquitaInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh10.0 CriticalgrypeAlpaquitaInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts9.1 CriticalgrypeAlpaquitaInvoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh5.3 MediumgrypeAlpaquitaInvoking infinite loop on large channel writes in golang.org/x/crypto/ssh9.1 CriticalgrypeAlpaquitaInvoking key constraints not enforced in golang.org/x/crypto/ssh/agent9.1 CriticalgrypeAlpaquitaInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent9.1 CriticalgrypeAlpaquitaInvoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh9.1 CriticalgrypeAlpaquitaInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh9.1 CriticalgrypeAlpaquitaInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh7.5 HighgrypeAlpaquitaInvoking bypass of certificate restrictions in golang.org/x/crypto/ssh6.3 MediumgrypeAlpaquitaInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh6.5 MediumgrypeAlpaquitago-git: Crafted repositories may modify main and submodule .git directories5.4 MediumgrypeAlpaquitago-git: Improper single-quote escaping in go-git SSH transport2.3 LowgrypeAlpaquitaBilly: Path traversal vulnerabilities8.1 HighgrypeAlpaquitago-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git7.0 HighgrypeAlpaquitaGo-getter may allow to arbitrary filesystem reads through git operations7.5 HighgrypeAlpaquitaGrype has a credential disclosure vulnerability in Grype JSON output8.2 HighgrypeAlpaquitaHashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack7.5 HighgrypeAlpaquitaHashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation8.4 HighgrypeAlpaquitaHashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches9.8 CriticalgrypeAlpaquitaInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical