trivy vulnerabilities (openSUSE)
94 vulnerabilities.
trivyopenSUSEBuildKit Git URL subdir component can cause access to restricted files8.2 HightrivyopenSUSEBuildKit vulnerable to malicious frontend causing file escape outside of storage root8.4 HightrivyopenSUSEgRPC-Go has an authorization bypass via missing leading slash in :path9.1 CriticaltrivyopenSUSECosign Certificate Chain Expiry Validation Issue Allows Issuing Certificate Expiry to Be Overlooked3.7 LowtrivyopenSUSEgo-git improperly verifies data integrity values for .idx and .pack files4.3 MediumtrivyopenSUSEDuplicate Advisory: chi has an open redirect vulnerability in the RedirectSlashes middleware4.7 MediumtrivyopenSUSEquic-go HTTP/3 QPACK Header Expansion DoS5.3 MediumtrivyopenSUSESigstore Timestamp Authority allocates excessive memory during request parsing7.5 HightrivyopenSUSEMalformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent5.3 MediumtrivyopenSUSEPotential denial of service in golang.org/x/crypto/ssh/agent7.5 HightrivyopenSUSEInfinite parsing loop in golang.org/x/net5.3 MediumtrivyopenSUSEQuadratic parsing complexity in golang.org/x/net/html5.3 MediumtrivyopenSUSEgithub.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3 MediumtrivyopenSUSEGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 MediumtrivyopenSUSEHelm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution8.5 HightrivyopenSUSEcontainerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.4.6 MediumtrivyopenSUSEOPA server Data API HTTP path injection of Rego7.4 HightrivyopenSUSEIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 MediumtrivyopenSUSEjwt-go allows excessive memory allocation during header parsing7.5 HightrivyopenSUSEPotential denial of service in golang.org/x/crypto7.5 HightrivyopenSUSEUnexpected memory consumption during token parsing in golang.org/x/oauth27.5 HightrivyopenSUSEGo JOSE's Parsing Vulnerable to Denial of Service6.6 MediumtrivyopenSUSEgo-git clients vulnerable to DoS via maliciously crafted Git server replies7.5 HightrivyopenSUSEgo-git has an Argument Injection via the URL field9.2 CriticaltrivyopenSUSENon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 MediumtrivyopenSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticaltrivyopenSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowtrivyopenSUSEStack exhaustion in Parse in go/build/constraint7.5 HightrivyopenSUSEStack exhaustion in Decoder.Decode in encoding/gob7.5 HightrivyopenSUSEStack exhaustion in all Parse functions in go/parser4.3 MediumtrivyopenSUSEHashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation8.4 HightrivyopenSUSETrivy possibly leaks registry credential when scanning images from malicious registries5.5 MediumtrivyopenSUSEHashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches9.8 CriticaltrivyopenSUSEA use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in...5.5 MediumtrivyopenSUSEgetHostByName Function Information Disclosure4.3 MediumtrivyopenSUSEAuthorization Bypass Through User-Controlled Key in emicklei/go-restful9.3 CriticaltrivyopenSUSEOut of bounds memory access in github.com/open-policy-agent/opa7.5 HightrivyopenSUSEInsecure handling of image volumes in containerd CRI plugin7.5 HightrivyopenSUSEArchive package allows chmod of file outside of unpack target directory5.0 MediumtrivyopenSUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical