142 matches found
CLEANSTART-2026-TQ18292 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0
Security vulnerability affects the crane package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...
CLEANSTART-2026-WJ46547 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash
Security vulnerability affects the crane package. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash...
CLEANSTART-2026-UH45267 NewNTUnicodeString does not check for string length overflow
Security vulnerability affects the crane package. NewNTUnicodeString does not check for string length overflow...
CVE-2026-42801
A flaw was found in ASR Crane and Falcon. This vulnerability, located in the asrrc module on Linux, is a NULL pointer dereference. An attacker could potentially exploit this to manipulate pointers, which may lead to unpredictable system behavior or a denial of service. Mitigation Mitigation for...
CVE-2026-42801
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
CVE-2026-42801 Deference after null check in as_rrc
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
EUVD-2026-85171
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
CVE-2026-42801 Deference after null check in as_rrc
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
CVE-2026-42801
A NULL pointer dereference vulnerability exists in the as_rrc module of ASR Crane, Falcon on Linux . The flaw is located in the program file 3g.mod/lib/src/urrsir.c and can lead to Pointer Manipulation . The vulnerability has a HIGH base severity score of 7.4. No specific exploit information or r...
PT-2026-97243
Name of the Vulnerable Software and Affected Versions ASR Crane, Falcon on Linux affected versions not specified Description A NULL pointer dereference in the as rrc module allows for pointer manipulation. This issue is associated with the program file 3g.mod/lib/src/urrsir.c. A NULL pointer...
CVE-2026-42801: NULL Pointer Dereference
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
GO-2026-4946 vulnerabilities
Vulnerabilities for packages: policy-controller, azure-workload-identity-webhook, docker-cli, crossplane-provider-keycloak, coredns, crossplane-provider-azure-storage, kyverno-notation-aws, temporal-ui-server, oras, task, gitlab-kas, golangci-lint, postgres-operator, direnv, helm-push, multus-cni...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: crossplane-fips, ko, mesosphere-vsphere-csi-fips, cephcsi-fips, nats-server, mattermost-fips, cilium-cli, prometheus-podman-exporter-fips, buildkite-agent-fips, kubescape, flux-helm-controller-fips, rancher-machine, kubernetes-csi-node-driver-registrar, dex-fips,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: crossplane-fips, ko, mesosphere-vsphere-csi-fips, cephcsi-fips, nats-server, mattermost-fips, cilium-cli, prometheus-podman-exporter-fips, buildkite-agent-fips, kubescape, flux-helm-controller-fips, rancher-machine, kubernetes-csi-node-driver-registrar, dex-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, nri-nginx, vertical-pod-autoscaler-fips, crossplane-provider-aws-memorydb-fips, redka, azure-workload-identity-webhook, kube-logging-logging-operator, pguser, crossplane-fips, golangci-lint, ko, prometheus-bind-exporter, mesosphere-vsphere-csi-fips,...
CVE-2024-34679
Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...
EUVD-2025-117227
Malicious code in minor-fuchsia-crane npm...
MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in juicy_crane_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b7680011fb13a9be52884b44764bc62e5c0373cbc7e9591336ccd7f18367eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...