git-bug vulnerabilities (openSUSE)
40 vulnerabilities.
-
git-bugopenSUSE webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades 8.2 High -
git-bugopenSUSE follow-redirects array-form headers bypass cross-origin credential stripping 8.2 High -
git-bugopenSUSE fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references 3.7 Low -
git-bugopenSUSE fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding 6.1 Medium -
git-bugopenSUSE fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization 4.8 Medium -
git-bugopenSUSE fast-uri vulnerable to improper path equivalence in relative reference normalization 3.7 Low -
git-bugopenSUSE Picomatch through 4.0.7 ReDoS via single-branch repeated extglob patterns 8.7 High -
git-bugopenSUSE qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string 6.3 Medium -
git-bugopenSUSE HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
git-bugopenSUSE Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
git-bugopenSUSE Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
git-bugopenSUSE HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
git-bugopenSUSE HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
git-bugopenSUSE PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion 5.9 Medium -
git-bugopenSUSE Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh 7.5 High -
git-bugopenSUSE Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
git-bugopenSUSE Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
git-bugopenSUSE Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent 5.3 Medium -
git-bugopenSUSE Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh 7.5 High -
git-bugopenSUSE Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh 10.0 Critical -
git-bugopenSUSE Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts 9.1 Critical -
git-bugopenSUSE Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh 5.3 Medium -
git-bugopenSUSE Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh 9.1 Critical -
git-bugopenSUSE Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent 9.1 Critical -
git-bugopenSUSE Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent 9.1 Critical -
git-bugopenSUSE Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh 9.1 Critical -
git-bugopenSUSE Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh 9.1 Critical -
git-bugopenSUSE Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh 7.5 High -
git-bugopenSUSE Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh 6.3 Medium -
git-bugopenSUSE Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh 6.5 Medium -
git-bugopenSUSE go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion 6.5 Medium -
git-bugopenSUSE go-git Credential leak via cross-host redirect in smart HTTP transport 4.7 Medium -
git-bugopenSUSE Incorrect calculation in CIRCL secp384r1 CombinedMult 2.9 Low -
git-bugopenSUSE Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
git-bugopenSUSE Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent 5.3 Medium -
git-bugopenSUSE Potential denial of service in golang.org/x/crypto/ssh/agent 7.5 High -
git-bugopenSUSE Infinite parsing loop in golang.org/x/net 5.3 Medium -
git-bugopenSUSE Quadratic parsing complexity in golang.org/x/net/html 5.3 Medium -
git-bugopenSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
git-bugopenSUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical