rook vulnerabilities (Azure Linux)
10 vulnerabilities.
-
rookAzure Linux Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
rookAzure Linux jwt-go allows excessive memory allocation during header parsing 7.5 High -
rookAzure Linux Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
rookAzure Linux Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low -
rookAzure Linux go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
rookAzure Linux Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) 4.3 Medium -
rookAzure Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
rookAzure Linux Unauthorized read of Custom Resources 6.5 Medium -
rookAzure Linux Uncontrolled Resource Consumption in promhttp 7.5 High -
rookAzure Linux golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High