keda vulnerabilities (Azure Linux)
68 vulnerabilities.
-
kedaAzure Linux Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net 6.1 Medium -
kedaAzure Linux Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net 7.5 High -
kedaAzure Linux compress zstd: Panic on two-block frames 8.7 High -
kedaAzure Linux Go JOSE: DoS when parsing JWKs that contain RSA keys 7.5 High -
kedaAzure Linux Go JOSE: Panics in JSON parsing 6.9 Medium -
kedaAzure Linux Go JOSE: Panic during CBC-HMAC processing 6.9 Medium -
kedaAzure Linux KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication 9.9 Critical -
kedaAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
kedaAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
kedaAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
kedaAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
kedaAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
kedaAzure Linux Application denial of service via missing BSON array length validation in MongoDB Go Driver 8.2 High -
kedaAzure Linux Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver 8.2 High -
kedaAzure Linux Panic parsing crafted input in x/text/secure/precis in golang.org/x/text 7.5 High -
kedaAzure Linux OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation 5.1 Medium -
kedaAzure Linux OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs 2.0 Low -
kedaAzure Linux RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking 8.2 High -
kedaAzure Linux RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr 9.5 Critical -
kedaAzure Linux RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client 8.9 High -
kedaAzure Linux RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser 9.4 Critical -
kedaAzure Linux RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation 8.9 High -
kedaAzure Linux RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration 8.2 High -
kedaAzure Linux RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation 8.9 High -
kedaAzure Linux RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields 7.0 High -
kedaAzure Linux RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow 9.1 Critical -
kedaAzure Linux Uncontrolled Memory Allocation in cel-go 6.9 Medium -
kedaAzure Linux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
kedaAzure Linux gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
kedaAzure Linux grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X... 9.8 Critical -
kedaAzure Linux amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload 8.9 High -
kedaAzure Linux Integer Overflow or Wraparound and Out-of-bounds Write in compress 7.5 High -
kedaAzure Linux etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline 8.7 High -
kedaAzure Linux Infinite loop on invalid input in golang.org/x/text 7.5 High -
kedaAzure Linux KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping 5.9 Medium -
kedaAzure Linux Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
kedaAzure Linux Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
kedaAzure Linux Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
kedaAzure Linux Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
kedaAzure Linux Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
kedaAzure Linux pgx: SQL Injection via placeholder confusion with dollar quoted string literals 2.3 Low -
kedaAzure Linux SpdyStream: DOS on CRI 8.7 High -
kedaAzure Linux filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity 1.7 Low -
kedaAzure Linux Heap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak 6.9 Medium -
kedaAzure Linux KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential 8.2 High -
kedaAzure Linux Expr has Denial of Service via Unbounded Recursion in Builtin Functions 7.5 High -
kedaAzure Linux Infinite parsing loop in golang.org/x/net 5.3 Medium -
kedaAzure Linux Quadratic parsing complexity in golang.org/x/net/html 5.3 Medium -
kedaAzure Linux Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
kedaAzure Linux Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium - Show olderLoading…