rekor vulnerabilities (openSUSE)
16 vulnerabilities.
-
rekoropenSUSE Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL 5.3 Medium -
rekoropenSUSE Rekor COSE v0.0.1 Canonicalize crashes when passed empty Message 5.3 Medium -
rekoropenSUSE Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
rekoropenSUSE github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives 5.3 Medium -
rekoropenSUSE jwt-go allows excessive memory allocation during header parsing 7.5 High -
rekoropenSUSE go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment 3.7 Low -
rekoropenSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
rekoropenSUSE Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
rekoropenSUSE Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
rekoropenSUSE go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
rekoropenSUSE HTTP/2 CONTINUATION flood in net/http 7.5 High -
rekoropenSUSE Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
rekoropenSUSE Security update for rekor No score -
rekoropenSUSE Security update for rekor No score -
rekoropenSUSE malformed proposed intoto v0.0.2 entries can cause a panic in Rekor 5.3 Medium -
rekoropenSUSE Rekor's compressed archives can result in OOM conditions 7.5 High