github.com/cloudflare/cfrpki vulnerabilities (Go)

10 vulnerabilities.

• github.com/cloudflare/cfrpki Go OctoRPKI crash when maximum iterations number is reached CVE-2022-3616 Fix available 5.4 MediumOctober 28, 2022
• github.com/cloudflare/cfrpki Go Path traversal mitigation bypass in OctoRPKI GHSA-3jhm-87m6-x959 Fix available No scoreJune 25, 2022
• github.com/cloudflare/cfrpki Go Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki CVE-2021-3978 Fix available 7.5 HighNovember 19, 2021
• github.com/cloudflare/cfrpki Go OctoRPKI crashes when processing GZIP bomb returned via malicious repository CVE-2021-3912 Fix available 4.2 MediumNovember 10, 2021
• github.com/cloudflare/cfrpki Go Infinite certificate chain depth results in OctoRPKI running forever CVE-2021-3908 Fix available 5.9 MediumNovember 10, 2021
• github.com/cloudflare/cfrpki Go Infinite open connection causes OctoRPKI to hang forever CVE-2021-3909 Fix available 4.4 MediumNovember 10, 2021
• github.com/cloudflare/cfrpki Go NUL character in ROA causes OctoRPKI to crash CVE-2021-3910 Fix available 4.4 MediumNovember 10, 2021
• github.com/cloudflare/cfrpki Go Arbitrary filepath traversal via URI injection CVE-2021-3907 Fix available 7.4 HighNovember 10, 2021
• github.com/cloudflare/cfrpki Go Misconfigured IP address field in ROA leads to OctoRPKI crash CVE-2021-3911 Fix available 4.2 MediumNovember 10, 2021
• github.com/cloudflare/cfrpki Go OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values CVE-2021-3761 Fix available 7.5 HighSeptember 7, 2021