packer vulnerabilities (Azure Linux)
74 vulnerabilities.
packerAzure LinuxPotential denial of service in golang.org/x/crypto7.5 HighpackerAzure LinuxUnexpected memory consumption during token parsing in golang.org/x/oauth27.5 HighpackerAzure LinuxGo JOSE's Parsing Vulnerable to Denial of Service6.6 MediumpackerAzure Linuxgo-git clients vulnerable to DoS via maliciously crafted Git server replies7.5 HighpackerAzure Linuxgo-git has an Argument Injection via the URL field9.2 CriticalpackerAzure LinuxNon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 MediumpackerAzure LinuxMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticalpackerAzure LinuxBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowpackerAzure Linuxgo-retryablehttp can leak basic auth credentials to log files6.0 MediumpackerAzure LinuxHTTP/2 CONTINUATION flood in net/http7.5 HighpackerAzure LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumpackerAzure LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighpackerAzure LinuxMaliciously crafted Git server replies can lead to path traversal and RCE on go-git clients9.8 CriticalpackerAzure LinuxMaliciously crafted Git server replies can cause DoS on go-git clients7.5 HighpackerAzure LinuxPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumpackerAzure LinuxHTTP request body disclosure in github.com/go-resty/resty/v25.9 MediumpackerAzure LinuxHTTP/2 rapid reset can cause excessive work in net/http7.5 HighpackerAzure LinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumpackerAzure LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighpackerAzure LinuxGo-Getter Vulnerable to Decompression Bombs4.2 MediumpackerAzure LinuxAn issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration...7.8 HighpackerAzure LinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighpackerAzure LinuxKubernetes API Server denial of service vulnerability from malicious YAML payloads6.5 MediumpackerAzure LinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical