11796 matches found
CLEANSTART-2026-DA69813 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2024-SK69505 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2023-24895 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2026-OI09716 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2024-GL32530 .NET DLL Hijacking Remote Code Execution Vulnerability
CVE-2023-28260 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2026-YY41698 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Security vulnerability affects the cri-tools package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label...
CLEANSTART-2024-SW12015 .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-21808 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2026-HP71482 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2024-MV63689 .NET Denial of Service Vulnerability
CVE-2023-21538 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2026-MJ25147 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2024-TX40015 .NET Framework Remote Code Execution Vulnerability
CVE-2022-41089 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2026-WP33718 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
CLEANSTART-2024-PD73825 NuGet Client Elevation of Privilege Vulnerability
CVE-2022-41032 affects multiple packages. NuGet Client Elevation of Privilege Vulnerability See references for individual vulnerability details...
CLEANSTART-2026-GJ32089 html
Security vulnerability affects the cri-tools package. The html...
CLEANSTART-2024-JX92340 .NET Core and Visual Studio Denial of Service Vulnerability
CVE-2022-38013 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2026-GU58694 html
Security vulnerability affects the cri-tools package. The html...
CLEANSTART-2024-JA62764 .NET Spoofing Vulnerability
CVE-2022-34716 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2026-OR73025 tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing
Security vulnerability affects the cri-tools package. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing...
CLEANSTART-2024-HP98221 .NET and Visual Studio Information Disclosure Vulnerability
CVE-2022-30184 affects multiple packages. . See references for individual vulnerability details...
CLEANSTART-2026-ZP53409 attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing
Security vulnerability affects the cri-tools package. An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing...
CLEANSTART-2026-CN84558 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames
Security vulnerability affects the cri-tools package. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames...
CLEANSTART-2026-HT24978 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the docker-cli-buildx package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-NU37715 OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go
Security vulnerability affects the cri-tools package. OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go...
CLEANSTART-2026-HP85044 spdystream is a Go library for multiplexing streams over SPDY connections
CVE-2026-35469 affects multiple packages. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...
CLEANSTART-2026-HI26609 When returning errors, functions in the net/textproto package would include its input as part of the error
Security vulnerability affects the cri-tools package. When returning errors, functions in the net/textproto package would include its input as part of the error...
CLEANSTART-2026-EI89098 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello
Security vulnerability affects the cri-tools package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...
CLEANSTART-2026-EP02666 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU
Security vulnerability affects the cri-tools package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...
CLEANSTART-2026-IO94492 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322
Security vulnerability affects the cri-tools package. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...
CLEANSTART-2026-NJ60272 Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)
Security vulnerability affects the cri-tools package. The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...
CLEANSTART-2026-HK83739 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...
Security vulnerability affects the cri-tools package. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block...
CLEANSTART-2026-WA32728 ReverseProxy can forward queries containing parameters not visible to Rewrite functions
Security vulnerability affects the cri-tools package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...
CLEANSTART-2026-GO32360 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute
Security vulnerability affects the cri-tools package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...
CLEANSTART-2026-VB61301 On Unix systems, opening a file in an os
Security vulnerability affects the cri-tools package. On Unix systems, opening a file in an os...
CLEANSTART-2026-YT99957 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations
Security vulnerability affects the cri-tools package. Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations...
CLEANSTART-2026-KR88876 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash
Security vulnerability affects the cri-tools package. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash...
CLEANSTART-2026-HM16976 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Security vulnerability affects the docker-cli-buildx package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...
CLEANSTART-2026-CU90484 tar
Security vulnerability affects the docker-cli-buildx package. tar...
CLEANSTART-2026-WY00600 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources
Security vulnerability affects the docker-cli-buildx package. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources...
CLEANSTART-2026-EG84666 On Linux, if the target of Root
Security vulnerability affects the docker-cli-buildx package. On Linux, if the target of Root...
CLEANSTART-2026-PL27634 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
Security vulnerability affects the docker-cli-buildx package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service...
CLEANSTART-2026-IO41664 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions
Security vulnerability affects the docker-cli-buildx package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions...
CLEANSTART-2026-AL61798 (*x509
Security vulnerability affects the cri-tools package. x509...
CLEANSTART-2026-NA44520 Actions which insert URLs into the content attribute of HTML meta tags are not escaped
Security vulnerability affects the cri-tools package. Actions which insert URLs into the content attribute of HTML meta tags are not escaped...
CLEANSTART-2026-PL94535 On Unix platforms, when listing the contents of a directory using File
Security vulnerability affects the cri-tools package. On Unix platforms, when listing the contents of a directory using File...
CLEANSTART-2026-DD43596 url
Security vulnerability affects the cri-tools package. url...
CLEANSTART-2026-NB86636 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...
Security vulnerability affects the cri-tools package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...
CLEANSTART-2026-PU86429 During the TLS 1
Security vulnerability affects the cri-tools package. During the TLS 1...
CLEANSTART-2026-ZT95420 Within HostnameError
Security vulnerability affects the cri-tools package. Within HostnameError...
CLEANSTART-2026-OX24018 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened
Security vulnerability affects the cri-tools package. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened...
CLEANSTART-2026-TJ01241 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Security vulnerability affects the cri-tools package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate...
CLEANSTART-2026-QA21098 net/url package does not set a limit on the number of query parameters in a query
Security vulnerability affects the cri-tools package. The net/url package does not set a limit on the number of query parameters in a query...