osbuild-composer-dnf-json vulnerabilities (TuxCare)
15 vulnerabilities.
osbuild-composer-dnf-jsonTuxCareEcho: Encoded slash (%2F) bypasses route-level protection and exposes static files7.5 Highosbuild-composer-dnf-jsonTuxCareQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highosbuild-composer-dnf-jsonTuxCareInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 Mediumosbuild-composer-dnf-jsonTuxCareInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumosbuild-composer-dnf-jsonTuxCareInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 Mediumosbuild-composer-dnf-jsonTuxCareQuadratic string concatenation in consumePhrase in net/mail7.5 Highosbuild-composer-dnf-jsonTuxCareQuadratic string concatentation in consumeComment in net/mail7.5 Highosbuild-composer-dnf-jsonTuxCareGo JOSE affect by a panic in JWE decryption7.5 Highosbuild-composer-dnf-jsonTuxCareDenial of service in github.com/jackc/pgproto3/v27.5 Highosbuild-composer-dnf-jsonTuxCareUnexpected session resumption in crypto/tls10.0 Criticalosbuild-composer-dnf-jsonTuxCareExcessive CPU consumption when building archive index in archive/zip6.5 Mediumosbuild-composer-dnf-jsonTuxCareMemory exhaustion in query parameter parsing in net/url7.5 Highosbuild-composer-dnf-jsonTuxCareExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highosbuild-composer-dnf-jsonTuxCareGo JOSE's Parsing Vulnerable to Denial of Service6.6 Mediumosbuild-composer-dnf-jsonTuxCareInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical