CLEANSTART-2026-SB25660 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the falcosidekick-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kine, step-ca, argo-workflows-fips, wavefront-collector-for-kubernetes, spicedb, kots, k3s, trillian, falcosidekick-fips, amass, trillian-fips, kube-bench, temporal-server, step, caddy, src, argo-workflows, keda-fips, kube-bench-fips, ferretdb, temporal-server-fips,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kine, step-ca, argo-workflows-fips, wavefront-collector-for-kubernetes, spicedb, kots, k3s, trillian, falcosidekick-fips, amass, trillian-fips, kube-bench, temporal-server, step, caddy, src, argo-workflows, keda-fips, kube-bench-fips, ferretdb, temporal-server-fips,...