git-lfs vulnerabilities (TuxCare)
19 vulnerabilities.
-
git-lfsTuxCare Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
git-lfsTuxCare Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
git-lfsTuxCare Enforce maximum recursion depth in encoding/asn1 7.5 High -
git-lfsTuxCare Crash when handling long CNAME response in net 7.5 High -
git-lfsTuxCare Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
git-lfsTuxCare Unexpected work during chain building in crypto/x509 7.5 High -
git-lfsTuxCare Incorrect parsing of IPv6 host literals in net/url 7.5 High -
git-lfsTuxCare Unexpected session resumption in crypto/tls 10.0 Critical -
git-lfsTuxCare Memory exhaustion in query parameter parsing in net/url 7.5 High -
git-lfsTuxCare Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
git-lfsTuxCare Git LFS may write to arbitrary files via crafted symlinks 8.6 High -
git-lfsTuxCare Git LFS permits exfiltration of credentials via crafted HTTP URLs 8.5 High -
git-lfsTuxCare Stack exhaustion in Decoder.Decode in encoding/gob 7.5 High -
git-lfsTuxCare Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip 9.8 Critical -
git-lfsTuxCare Malformed DNS message can cause infinite loop in net 5.9 Medium -
git-lfsTuxCare HTTP/2 CONTINUATION flood in net/http 7.5 High -
git-lfsTuxCare Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
git-lfsTuxCare Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High -
git-lfsTuxCare Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical