trivy vulnerabilities (Red Hat)
27 vulnerabilities.
-
trivyRed Hat Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to... 2.5 Low -
trivyRed Hat go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal 8.7 High -
trivyRed Hat Go-getter vulnerable to a privilege escalation issue in its archive decompression handling 6.7 Medium -
trivyRed Hat go-git: Malicious reference names may modify files outside the reference storage 6.3 Medium -
trivyRed Hat go-git: Worktree operations may follow symlinks 7.1 High -
trivyRed Hat sigstore-go fails to check signature timestamps against a signing key's validity period 3.1 Low -
trivyRed Hat Integer Overflow or Wraparound and Out-of-bounds Write in compress 7.5 High -
trivyRed Hat Possible panic when incorrect parameters sent from frontend 6.3 Medium -
trivyRed Hat BuildKit: Malicious client can bypass destination directory validation on local sources upload 7.2 High -
trivyRed Hat Malicious client can bypass destination directory validation on local sources upload 6.9 Medium -
trivyRed Hat WCOW cache mount source selector resolves NTFS junctions outside of cache root 5.6 Medium -
trivyRed Hat Infinite loop on invalid input in golang.org/x/text 7.5 High -
trivyRed Hat sigstore-go: Multi-log threshold bypass via single compromised log 5.9 Medium -
trivyRed Hat containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull 9.4 Critical -
trivyRed Hat containerd: CRI checkpoint import allows local image tag poisoning 5.6 Medium -
trivyRed Hat containerd image-triggered runtime DoS via unbounded group parsing 5.3 Medium -
trivyRed Hat containerd CRI checkpoint restore CDI annotation smuggling 8.4 High -
trivyRed Hat containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore 8.2 High -
trivyRed Hat Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic 7.5 High -
trivyRed Hat quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustion 5.3 Medium -
trivyRed Hat OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse 2.1 Low -
trivyRed Hat containerd user ID handling bypass allows runAsNonRoot evasion 7.3 High -
trivyRed Hat go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion 6.5 Medium -
trivyRed Hat urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API 8.9 High -
trivyRed Hat go-git Credential leak via cross-host redirect in smart HTTP transport 4.7 Medium -
trivyRed Hat Denial of service in github.com/buger/jsonparser 7.5 High -
trivyRed Hat Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High