CLEANSTART-2026-SB25660 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the falcosidekick-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: ferretdb, temporal-server, kube-bench-fips, argo-workflows, kine, caddy-fips, temporal-server-fips, amass, wavefront-collector-for-kubernetes, step, spicedb, argo-workflows-fips, falcosidekick-fips, step-ca, trillian, src, trillian-fips, kube-bench, k3s, kots, caddy...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: ferretdb, temporal-server, kube-bench-fips, argo-workflows, kine, caddy-fips, temporal-server-fips, amass, wavefront-collector-for-kubernetes, step, spicedb, argo-workflows-fips, falcosidekick-fips, step-ca, trillian, src, trillian-fips, kube-bench, k3s, kots, caddy...