velero vulnerabilities (openSUSE)
12 vulnerabilities.
-
veleroopenSUSE OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs 2.0 Low -
veleroopenSUSE gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
veleroopenSUSE Non-linear parsing of case-insensitive content in golang.org/x/net/html 5.3 Medium -
veleroopenSUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
veleroopenSUSE HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
veleroopenSUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
veleroopenSUSE Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
veleroopenSUSE Stack exhaustion due to deeply nested types in go/parser 5.5 Medium -
veleroopenSUSE golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
veleroopenSUSE Improper Input Validation in GoGo Protobuf 8.6 High -
veleroopenSUSE golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability 7.5 High -
veleroopenSUSE velero-1.6.3-1.2 on GA media 5.5 Medium