buildpacks-cli vulnerabilities (openSUSE)
8 vulnerabilities.
-
buildpacks-cliopenSUSE Distrust compromised intermediate certificates in crypto/x509 6.8 Medium -
buildpacks-cliopenSUSE HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
buildpacks-cliopenSUSE Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh 7.5 High -
buildpacks-cliopenSUSE Tar extraction in moby/go-archive can write outside the destination directory via link following 7.1 High -
buildpacks-cliopenSUSE github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files 5.5 Medium -
buildpacks-cliopenSUSE OpenTelemetry-Go's baggage parsing no longer caps raw header length 5.3 Medium -
buildpacks-cliopenSUSE Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 6.5 Medium -
buildpacks-cliopenSUSE Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High