Cloudfoundry Routing-release vulnerabilities

• cloud foundry routing, cf deployment, cloudfoundry cf-deployment +1 more +3 more CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter CVE-2023-34041 5.3 MediumSeptember 8, 2023
• cloud foundry routing, cf deployment, cloudfoundry cf-deployment +1 more +3 more CF clusters with NGINX in front of them may be vulnerable to DoS CVE-2020-5416 7.7 HighAugust 21, 2020
• golang go, cloudfoundry cf-deployment, routing-release +3 more +5 more Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as... CVE-2020-15586 Fix available 5.9 MediumJuly 17, 2020
• cloud foundry routing, cloudfoundry cf-deployment, routing-release +2 more A forged route service request using an invalid nonce can cause the gorouter to panic and crash CVE-2019-11289 Fix available 8.6 HighNovember 19, 2019
• cloudfoundry routing-release, cloud foundry router, cloudfoundry cf-deployment +2 more Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially… CVE-2018-1193 5.3 MediumMay 23, 2018
• cloudfoundry cf-deployment, routing-release, dell emc the cloud foundry gorouter +2 more In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers (ALBs) and some other HTTP-aware Load Bal… CVE-2018-1221 8.1 HighMarch 19, 2018
• cloudfoundry capi-release, cf-release, cloud foundry +1 more +3 more The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0,... CVE-2017-8034 6.6 MediumJuly 17, 2017
• cloudfoundry cf-release, cloud foundry, routing-release +2 more An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and... CVE-2016-8218 9.8 CriticalJune 13, 2017