containerized-data-importer1.66 vulnerabilities (openSUSE)
17 vulnerabilities.
containerized-data-importer1.66openSUSEPrevent DoS on deadlocked established channel in golang.org/x/crypto/ssh7.5 Highcontainerized-data-importer1.66openSUSEgRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation8.7 Highcontainerized-data-importer1.66openSUSEgRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion6.3 Mediumcontainerized-data-importer1.66openSUSESource-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh7.5 Highcontainerized-data-importer1.66openSUSEInfinite loop on invalid input in golang.org/x/text7.5 Highcontainerized-data-importer1.66openSUSEOpenTelemetry-Go's baggage parsing no longer caps raw header length5.3 Mediumcontainerized-data-importer1.66openSUSEInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumcontainerized-data-importer1.66openSUSEInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts9.1 Criticalcontainerized-data-importer1.66openSUSEInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent9.1 Criticalcontainerized-data-importer1.66openSUSEInvoking bypass of certificate restrictions in golang.org/x/crypto/ssh6.3 Mediumcontainerized-data-importer1.66openSUSEInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh6.5 Mediumcontainerized-data-importer1.66openSUSESpdyStream: DOS on CRI8.7 Highcontainerized-data-importer1.66openSUSEGo JOSE affect by a panic in JWE decryption7.5 Highcontainerized-data-importer1.66openSUSEInfinite parsing loop in golang.org/x/net5.3 Mediumcontainerized-data-importer1.66openSUSEQuadratic parsing complexity in golang.org/x/net/html5.3 Mediumcontainerized-data-importer1.66openSUSEgithub.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3 Mediumcontainerized-data-importer1.66openSUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical