osbuild-composer-worker vulnerabilities (TuxCare)
25 vulnerabilities.
osbuild-composer-workerTuxCareLimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highosbuild-composer-workerTuxCareAvoid quadratic complexity in resolvePath in net/url5.9 Mediumosbuild-composer-workerTuxCareAdd recursion depth guard during decode in encoding/xml7.5 Highosbuild-composer-workerTuxCareFix Javascript regexp context tracking in html/template6.1 Mediumosbuild-composer-workerTuxCareEnforce maximum recursion depth in encoding/asn17.5 Highosbuild-composer-workerTuxCareEcho: Encoded slash (%2F) bypasses route-level protection and exposes static files7.5 Highosbuild-composer-workerTuxCareQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highosbuild-composer-workerTuxCareInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 Mediumosbuild-composer-workerTuxCareInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumosbuild-composer-workerTuxCareInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 Mediumosbuild-composer-workerTuxCareQuadratic string concatenation in consumePhrase in net/mail7.5 Highosbuild-composer-workerTuxCareQuadratic string concatentation in consumeComment in net/mail7.5 Highosbuild-composer-workerTuxCareUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highosbuild-composer-workerTuxCareTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumosbuild-composer-workerTuxCareInefficient policy validation in crypto/x5097.5 Highosbuild-composer-workerTuxCareUnexpected work during chain building in crypto/x5097.5 Highosbuild-composer-workerTuxCareGo JOSE affect by a panic in JWE decryption7.5 Highosbuild-composer-workerTuxCareDenial of service in github.com/jackc/pgproto3/v27.5 Highosbuild-composer-workerTuxCareIncorrect parsing of IPv6 host literals in net/url7.5 Highosbuild-composer-workerTuxCareUnexpected session resumption in crypto/tls10.0 Criticalosbuild-composer-workerTuxCareExcessive CPU consumption when building archive index in archive/zip6.5 Mediumosbuild-composer-workerTuxCareMemory exhaustion in query parameter parsing in net/url7.5 Highosbuild-composer-workerTuxCareExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highosbuild-composer-workerTuxCareGo JOSE's Parsing Vulnerable to Denial of Service6.6 Mediumosbuild-composer-workerTuxCareInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical