alloy vulnerabilities (SUSE)
73 vulnerabilities.
alloySUSEDuplicate Advisory: pgproto3: Negative field length panics in DataRow.Decode7.5 HighalloySUSEgRPC-Go has an authorization bypass via missing leading slash in :path9.1 CriticalalloySUSEIncorrect calculation in CIRCL secp384r1 CombinedMult2.9 LowalloySUSEfilippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity1.7 LowalloySUSEHeap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak6.9 MediumalloySUSEgo-git improperly verifies data integrity values for .idx and .pack files4.3 MediumalloySUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 HighalloySUSEPotential denial of service in golang.org/x/crypto/ssh/agent7.5 HighalloySUSErunc: LSM labels can be bypassed with malicious config using dummy procfs files7.3 HighalloySUSEcontainer escape due to /dev/console mount and related races8.4 HighalloySUSErunc container escape via "masked path" abuse due to mount race conditions7.3 HighalloySUSEInfinite parsing loop in golang.org/x/net5.3 MediumalloySUSEQuadratic parsing complexity in golang.org/x/net/html5.3 MediumalloySUSEgithub.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3 MediumalloySUSEGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 MediumalloySUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical