CLEANSTART-2026-SB25660 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the falcosidekick-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: temporal-server, caddy, amass, src, spicedb, trillian-fips, kube-bench, argo-workflows-fips, temporal-server-fips, argo-workflows, ferretdb, wavefront-collector-for-kubernetes, caddy-fips, kine, falcosidekick-fips, step-ca, kube-bench-fips, k3s, kots, step, trillian,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: temporal-server, caddy, amass, src, spicedb, trillian-fips, kube-bench, argo-workflows-fips, temporal-server-fips, argo-workflows, ferretdb, wavefront-collector-for-kubernetes, caddy-fips, kine, falcosidekick-fips, step-ca, kube-bench-fips, k3s, kots, step, trillian,...