rootlesskit vulnerabilities (Alpaquita)
11 vulnerabilities.
-
rootlesskitAlpaquita HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
rootlesskitAlpaquita Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
rootlesskitAlpaquita Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
rootlesskitAlpaquita Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 7.5 High -
rootlesskitAlpaquita Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage 7.5 High -
rootlesskitAlpaquita Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
rootlesskitAlpaquita Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
rootlesskitAlpaquita Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
rootlesskitAlpaquita Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
rootlesskitAlpaquita Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
rootlesskitAlpaquita Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical