osv-scanner vulnerabilities (Alpaquita)
29 vulnerabilities.
osv-scannerAlpaquitaHTTP/2 server crash due to HPACK encoder race in net/http7.5 Highosv-scannerAlpaquitaExcessive CPU consumption from repeated initial window changes in net/http7.5 Highosv-scannerAlpaquitaDouble flow control refund on HTTP/2 server streams in net/http9.1 Criticalosv-scannerAlpaquitaSource-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh7.5 Highosv-scannerAlpaquitaParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5 Highosv-scannerAlpaquitaInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1 Mediumosv-scannerAlpaquitaInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 Mediumosv-scannerAlpaquitaInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumosv-scannerAlpaquitaInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 Mediumosv-scannerAlpaquitaInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 Mediumosv-scannerAlpaquitaInvoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent5.3 Mediumosv-scannerAlpaquitaInvoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh7.5 Highosv-scannerAlpaquitaInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh10.0 Criticalosv-scannerAlpaquitaInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts9.1 Criticalosv-scannerAlpaquitaInvoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh5.3 Mediumosv-scannerAlpaquitaInvoking infinite loop on large channel writes in golang.org/x/crypto/ssh9.1 Criticalosv-scannerAlpaquitaInvoking key constraints not enforced in golang.org/x/crypto/ssh/agent9.1 Criticalosv-scannerAlpaquitaInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent9.1 Criticalosv-scannerAlpaquitaInvoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh9.1 Criticalosv-scannerAlpaquitaInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh9.1 Criticalosv-scannerAlpaquitaInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh7.5 Highosv-scannerAlpaquitaInvoking bypass of certificate restrictions in golang.org/x/crypto/ssh6.3 Mediumosv-scannerAlpaquitaInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh6.5 Mediumosv-scannerAlpaquitago-git: Crafted repositories may modify main and submodule .git directories5.4 Mediumosv-scannerAlpaquitago-git: Improper single-quote escaping in go-git SSH transport2.3 Lowosv-scannerAlpaquitaBilly: Path traversal vulnerabilities8.1 Highosv-scannerAlpaquitago-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git7.0 Highosv-scannerAlpaquitagoldmark vulnerable to Cross-site Scripting (XSS)5.1 Mediumosv-scannerAlpaquitaInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical