vexctl vulnerabilities (openSUSE)
14 vulnerabilities.
-
vexctlopenSUSE HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
vexctlopenSUSE Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
vexctlopenSUSE Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
vexctlopenSUSE HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
vexctlopenSUSE HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
vexctlopenSUSE sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal 5.8 Medium -
vexctlopenSUSE Fulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass 5.8 Medium -
vexctlopenSUSE Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
vexctlopenSUSE jwt-go allows excessive memory allocation during header parsing 7.5 High -
vexctlopenSUSE HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
vexctlopenSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
vexctlopenSUSE Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
vexctlopenSUSE Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
vexctlopenSUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical