syft vulnerabilities (Red Hat)
13 vulnerabilities.
-
syftRed Hat Go-getter vulnerable to a privilege escalation issue in its archive decompression handling 6.7 Medium -
syftRed Hat go-git: Malicious reference names may modify files outside the reference storage 6.3 Medium -
syftRed Hat go-git: Worktree operations may follow symlinks 7.1 High -
syftRed Hat Integer Overflow or Wraparound and Out-of-bounds Write in compress 7.5 High -
syftRed Hat Infinite loop on invalid input in golang.org/x/text 7.5 High -
syftRed Hat containerd image-triggered runtime DoS via unbounded group parsing 5.3 Medium -
syftRed Hat containerd CRI checkpoint restore CDI annotation smuggling 8.4 High -
syftRed Hat containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore 8.2 High -
syftRed Hat OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse 2.1 Low -
syftRed Hat go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion 6.5 Medium -
syftRed Hat go-git Credential leak via cross-host redirect in smart HTTP transport 4.7 Medium -
syftRed Hat Denial of service in github.com/buger/jsonparser 7.5 High -
syftRed Hat Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High