kumactl vulnerabilities (openSUSE)
15 vulnerabilities.
-
kumactlopenSUSE OpenTelemetry-Go's baggage parsing no longer caps raw header length 5.3 Medium -
kumactlopenSUSE gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
kumactlopenSUSE filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity 1.7 Low -
kumactlopenSUSE Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
kumactlopenSUSE Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent 5.3 Medium -
kumactlopenSUSE Potential denial of service in golang.org/x/crypto/ssh/agent 7.5 High -
kumactlopenSUSE Infinite parsing loop in golang.org/x/net 5.3 Medium -
kumactlopenSUSE Quadratic parsing complexity in golang.org/x/net/html 5.3 Medium -
kumactlopenSUSE Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to... 7.8 High -
kumactlopenSUSE Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium -
kumactlopenSUSE jwt-go allows excessive memory allocation during header parsing 7.5 High -
kumactlopenSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
kumactlopenSUSE Non-linear parsing of case-insensitive content in golang.org/x/net/html 5.3 Medium -
kumactlopenSUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
kumactlopenSUSE Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low