142 matches found
CLEANSTART-2026-TQ18292 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0
Security vulnerability affects the crane package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...
CLEANSTART-2026-WJ46547 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash
Security vulnerability affects the crane package. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash...
CLEANSTART-2026-UH45267 NewNTUnicodeString does not check for string length overflow
Security vulnerability affects the crane package. NewNTUnicodeString does not check for string length overflow...
CVE-2026-42801
A flaw was found in ASR Crane and Falcon. This vulnerability, located in the asrrc module on Linux, is a NULL pointer dereference. An attacker could potentially exploit this to manipulate pointers, which may lead to unpredictable system behavior or a denial of service. Mitigation Mitigation for...
CVE-2026-42801
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
CVE-2026-42801 Deference after null check in as_rrc
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
EUVD-2026-85171
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
CVE-2026-42801 Deference after null check in as_rrc
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
CVE-2026-42801
A NULL pointer dereference vulnerability exists in the as_rrc module of ASR Crane, Falcon on Linux . The flaw is located in the program file 3g.mod/lib/src/urrsir.c and can lead to Pointer Manipulation . The vulnerability has a HIGH base severity score of 7.4. No specific exploit information or r...
PT-2026-97243
Name of the Vulnerable Software and Affected Versions ASR Crane, Falcon on Linux affected versions not specified Description A NULL pointer dereference in the as rrc module allows for pointer manipulation. This issue is associated with the program file 3g.mod/lib/src/urrsir.c. A NULL pointer...
CVE-2026-42801: NULL Pointer Dereference
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
GO-2026-4946 vulnerabilities
Vulnerabilities for packages: kaf, mcp-grafana, task, certificate-transparency, go-licenses, crossplane-provider-azure-managedidentity, croc, slsa-verifier, trivy-operator, cluster-proportional-autoscaler, wal-g, helm-push, cis-operator, kubernetes-dashboard-web, kapp, mesosphere-vsphere-csi,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: vault, syft, crane-fips, rke2-runtime, k8ssandra-client-fips, calico, gatekeeper, scorecard, amazon-ecs-agent, prometheus-fips, consul, rancher-helm, k8s-device-plugin, mesosphere-vsphere-csi-fips, knative-eventing, flux-source-controller, gosu, aactl, sonobuoy-fips,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: vault, syft, crane-fips, rke2-runtime, k8ssandra-client-fips, calico, gatekeeper, scorecard, amazon-ecs-agent, prometheus-fips, consul, rancher-helm, k8s-device-plugin, mesosphere-vsphere-csi-fips, knative-eventing, flux-source-controller, gosu, aactl, sonobuoy-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: vault, cert-manager-openshift-routes-fips, nri-kafka-fips, syft, crane-fips, rke2-runtime, crossplane-provider-kubernetes-fips, chart-testing, k8ssandra-client-fips, kyverno-policy-reporter-plugins-trivy-fips, nri-postgresql, calico, gatekeeper, kepler, lazygit,...
CVE-2024-34679
Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege...
EUVD-2025-117227
Malicious code in minor-fuchsia-crane npm...
MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in juicy_crane_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b7680011fb13a9be52884b44764bc62e5c0373cbc7e9591336ccd7f18367eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...