GO-2024-2618 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, falcosidekick, guac...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: k3s, argo-workflows, argo-workflows-fips, step, ferretdb, kine, spicedb, step-ca, temporal-server, kube-bench, trillian, caddy, falcosidekick-fips, kots, kube-bench-fips, amass, caddy-fips, temporal-server-fips, trillian-fips, wavefront-collector-for-kubernetes, src...

CLEANSTART-2026-SB25660 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the falcosidekick-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: k3s, argo-workflows, argo-workflows-fips, step, ferretdb, kine, spicedb, step-ca, temporal-server, kube-bench, trillian, caddy, falcosidekick-fips, kots, kube-bench-fips, amass, caddy-fips, temporal-server-fips, trillian-fips, wavefront-collector-for-kubernetes, src...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: k3s, argo-workflows, argo-workflows-fips, step, ferretdb, kine, spicedb, step-ca, temporal-server, kube-bench, trillian, caddy, falcosidekick-fips, kots, kube-bench-fips, amass, caddy-fips, temporal-server-fips, trillian-fips, wavefront-collector-for-kubernetes, src...