skopeo vulnerabilities (TuxCare)
20 vulnerabilities.
-
skopeoTuxCare Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
skopeoTuxCare Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
skopeoTuxCare Fix Javascript regexp context tracking in html/template 6.1 Medium -
skopeoTuxCare Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
skopeoTuxCare Enforce maximum recursion depth in encoding/asn1 7.5 High -
skopeoTuxCare Inefficient candidate hostname parsing in crypto/x509 6.5 Medium -
skopeoTuxCare Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
skopeoTuxCare Inefficient policy validation in crypto/x509 7.5 High -
skopeoTuxCare Unexpected work during chain building in crypto/x509 7.5 High -
skopeoTuxCare Go JOSE affect by a panic in JWE decryption 7.5 High -
skopeoTuxCare Incorrect parsing of IPv6 host literals in net/url 7.5 High -
skopeoTuxCare Unexpected session resumption in crypto/tls 10.0 Critical -
skopeoTuxCare Memory exhaustion in query parameter parsing in net/url 7.5 High -
skopeoTuxCare Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
skopeoTuxCare Unbounded allocation when parsing GNU sparse map in archive/tar 4.3 Medium -
skopeoTuxCare Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
skopeoTuxCare go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
skopeoTuxCare Containers/image: digest type does not guarantee valid type 8.3 High -
skopeoTuxCare Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) 4.3 Medium -
skopeoTuxCare Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High