CLEANSTART-2026-SB25660 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the falcosidekick-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: caddy, kube-bench-fips, kine, trillian, kube-bench, keda-fips, kots, argo-workflows-fips, src, trillian-fips, ferretdb, step-ca, amass, argo-workflows, step, spicedb, caddy-fips, wavefront-collector-for-kubernetes, k3s, temporal-server-fips, falcosidekick-fips,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: caddy, kube-bench-fips, kine, trillian, kube-bench, keda-fips, kots, argo-workflows-fips, src, trillian-fips, ferretdb, step-ca, amass, argo-workflows, step, spicedb, caddy-fips, wavefront-collector-for-kubernetes, k3s, temporal-server-fips, falcosidekick-fips,...