skopeo-tests vulnerabilities (TuxCare)
20 vulnerabilities.
skopeo-testsTuxCareLimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highskopeo-testsTuxCareAvoid quadratic complexity in resolvePath in net/url5.9 Mediumskopeo-testsTuxCareFix Javascript regexp context tracking in html/template6.1 Mediumskopeo-testsTuxCareApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highskopeo-testsTuxCareEnforce maximum recursion depth in encoding/asn17.5 Highskopeo-testsTuxCareInefficient candidate hostname parsing in crypto/x5096.5 Mediumskopeo-testsTuxCareUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highskopeo-testsTuxCareInefficient policy validation in crypto/x5097.5 Highskopeo-testsTuxCareUnexpected work during chain building in crypto/x5097.5 Highskopeo-testsTuxCareGo JOSE affect by a panic in JWE decryption7.5 Highskopeo-testsTuxCareIncorrect parsing of IPv6 host literals in net/url7.5 Highskopeo-testsTuxCareUnexpected session resumption in crypto/tls10.0 Criticalskopeo-testsTuxCareMemory exhaustion in query parameter parsing in net/url7.5 Highskopeo-testsTuxCareExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highskopeo-testsTuxCareUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Mediumskopeo-testsTuxCareGo JOSE's Parsing Vulnerable to Denial of Service6.6 Mediumskopeo-testsTuxCarego-retryablehttp can leak basic auth credentials to log files6.0 Mediumskopeo-testsTuxCareContainers/image: digest type does not guarantee valid type8.3 Highskopeo-testsTuxCareGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 Mediumskopeo-testsTuxCareInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 High