grype vulnerabilities (Red Hat)
10 vulnerabilities.
-
grypeRed Hat Go-getter vulnerable to a privilege escalation issue in its archive decompression handling 6.7 Medium -
grypeRed Hat go-git: Malicious reference names may modify files outside the reference storage 6.3 Medium -
grypeRed Hat go-git: Worktree operations may follow symlinks 7.1 High -
grypeRed Hat Integer Overflow or Wraparound and Out-of-bounds Write in compress 7.5 High -
grypeRed Hat Infinite loop on invalid input in golang.org/x/text 7.5 High -
grypeRed Hat containerd image-triggered runtime DoS via unbounded group parsing 5.3 Medium -
grypeRed Hat containerd CRI checkpoint restore CDI annotation smuggling 8.4 High -
grypeRed Hat containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore 8.2 High -
grypeRed Hat go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion 6.5 Medium -
grypeRed Hat Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High