gh vulnerabilities (openSUSE)
19 vulnerabilities.
-
ghopenSUSE Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
ghopenSUSE gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
ghopenSUSE Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh 7.5 High -
ghopenSUSE Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh 7.5 High -
ghopenSUSE gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
ghopenSUSE gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion 6.3 Medium -
ghopenSUSE Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 7.5 High -
ghopenSUSE GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default 2.1 Low -
ghopenSUSE GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching 2.1 Low -
ghopenSUSE GitHub CLI: Terminal escape sequence injection in multiple `gh` commands 5.3 Medium -
ghopenSUSE GitHub CLI: Unescaped variable components in request URLs could allow path traversal 5.1 Medium -
ghopenSUSE GitHub CLI: Partial token disclosure in `gh auth status` output 3.3 Low -
ghopenSUSE Integer Overflow or Wraparound and Out-of-bounds Write in compress 7.5 High -
ghopenSUSE GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace 4.4 Medium -
ghopenSUSE OpenTelemetry-Go's baggage parsing no longer caps raw header length 5.3 Medium -
ghopenSUSE Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
ghopenSUSE Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer 8.0 High -
ghopenSUSE go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
ghopenSUSE Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical