trivy vulnerabilities (SUSE)
16 vulnerabilities.
-
trivySUSE Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
trivySUSE go-git clients vulnerable to DoS via maliciously crafted Git server replies 7.5 High -
trivySUSE go-git has an Argument Injection via the URL field 9.2 Critical -
trivySUSE Non-linear parsing of case-insensitive content in golang.org/x/net/html 5.3 Medium -
trivySUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
trivySUSE Stack exhaustion in Parse in go/build/constraint 7.5 High -
trivySUSE Stack exhaustion in Decoder.Decode in encoding/gob 7.5 High -
trivySUSE Stack exhaustion in all Parse functions in go/parser 4.3 Medium -
trivySUSE HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation 8.4 High -
trivySUSE Trivy possibly leaks registry credential when scanning images from malicious registries 5.5 Medium -
trivySUSE HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches 9.8 Critical -
trivySUSE A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in... 5.5 Medium -
trivySUSE getHostByName Function Information Disclosure 4.3 Medium -
trivySUSE Authorization Bypass Through User-Controlled Key in emicklei/go-restful 9.3 Critical -
trivySUSE Out of bounds memory access in github.com/open-policy-agent/opa 7.5 High -
trivySUSE Insecure handling of image volumes in containerd CRI plugin 7.5 High