11796 matches found
CLEANSTART-2026-TC21251 ParseAddress function constructs domain-literal address components through repeated string concatenation
Security vulnerability affects the cri-tools package. The ParseAddress function constructs domain-literal address components through repeated string concatenation...
CLEANSTART-2026-BK69273 Reader
Security vulnerability affects the cri-tools package. The Reader...
CLEANSTART-2026-SZ95585 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input
Security vulnerability affects the cri-tools package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input...
CLEANSTART-2026-YO61836 When Conn
Security vulnerability affects the cri-tools package. When Conn...
CLEANSTART-2026-RI58790 Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method
Security vulnerability affects the cri-tools package. Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method...
CLEANSTART-2026-UM83284 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Security vulnerability affects the cri-tools package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate...
CLEANSTART-2026-AZ82176 Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit
Security vulnerability affects the cri-tools package. Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit...
CLEANSTART-2026-EJ31642 Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion
Security vulnerability affects the cri-tools package. Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...
CLEANSTART-2026-SE28304 tar
Security vulnerability affects the cri-tools package. tar...
CLEANSTART-2026-MW22726 Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL
Security vulnerability affects the cri-tools package. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL...
CLEANSTART-2026-MU09759 Cancelling a query (e
Security vulnerability affects the cri-tools package. Cancelling a query e...
CLEANSTART-2026-NW20382 If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", "
Security vulnerability affects the cri-tools package. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", "...
CLEANSTART-2026-MQ77051 Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information
Security vulnerability affects the cri-tools package. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
CLEANSTART-2026-CB13715 It was possible to improperly access the parent directory of an os
Security vulnerability affects the cri-tools package. It was possible to improperly access the parent directory of an os...
CLEANSTART-2026-PP37381 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Security vulnerability affects the cri-tools package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...
CLEANSTART-2026-KC86970 Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component
Security vulnerability affects the cri-tools package. Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component...
CLEANSTART-2026-PR48367 Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture
Security vulnerability affects the cri-tools package. Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture...
CLEANSTART-2026-DG53336 os
Security vulnerability affects the cri-tools package. os...
CLEANSTART-2026-MQ17226 certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain
Security vulnerability affects the cri-tools package. A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain...
CLEANSTART-2026-HM31104 HTTP client drops sensitive headers after following a cross-domain redirect
Security vulnerability affects the cri-tools package. The HTTP client drops sensitive headers after following a cross-domain redirect...
CLEANSTART-2026-RR17110 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the docker-cli-buildx package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-SK27128 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps
Security vulnerability affects the docker-cli-buildx package. Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps...
CLEANSTART-2026-ZT40995 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...
CLEANSTART-2026-DU09908 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...
CLEANSTART-2026-FH32149 Moby is an open source container framework
Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...
CLEANSTART-2026-RR21163 Moby is an open source container framework
Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...
CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...
CLEANSTART-2026-KD34055 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass
Security vulnerability affects the docker-cli-buildx package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...
CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow
Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...
CLEANSTART-2026-DK67034 Security fix for GHSA-xm5m-wgh2-rrg3 applied in: docker-cli-buildx 0.32.1-r0
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-VU05502 Security fix for GHSA-hfvc-g4fc-pqhx applied in: docker-cli-buildx 0.32.1-r0
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-TG47490 Security fix for GHSA-w8rr-5gcm-pp58 applied in: docker-cli-buildx 0.32.1-r0
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-GU43642 Security fix for GHSA-pc3f-x583-g7j2 applied in: docker-cli-buildx 0.32.1-r0
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-ZH52889 Security fix for GHSA-p77j-4mvh-x3m3 applied in: docker-cli-buildx 0.32.1-r0
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-HI94719 Security fix for GHSA-4vrq-3vrq-g6gg applied in: docker-cli-buildx 0.32.1-r0
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2024-XV18933 Git is an open source, scalable, distributed revision control system
Security vulnerability affects the docker-cli-compose package. Git is an open source, scalable, distributed revision control system...
CLEANSTART-2026-TB67127 Security fix for GHSA-4c29-8rgm-jvjj applied in: docker-cli-buildx 0.32.1-r0
Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2024-OB04829 In net/http in Go before 1
Security vulnerability affects the docker-cli-compose package. In net/http in Go before 1...
CLEANSTART-2023-PV22404 flaw was found in djvulibre-3
Security vulnerability affects the djvulibre package. A flaw was found in djvulibre-3...
CLEANSTART-2023-CR97144 flaw was found in djvulibre-3
Security vulnerability affects the djvulibre package. A flaw was found in djvulibre-3...
CLEANSTART-2023-FQ52718 flaw was found in djvulibre-3
Security vulnerability affects the djvulibre package. A flaw was found in djvulibre-3...
CLEANSTART-2023-HK10097 flaw was found in djvulibre-3
Security vulnerability affects the djvulibre package. A flaw was found in djvulibre-3...
CLEANSTART-2023-SN97100 out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText
Security vulnerability affects the djvulibre package. An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText...
CLEANSTART-2023-UD90988 Security fix for CVE-2021-3500 applied in: djvulibre 3.5.28-r1
Security vulnerability affects the djvulibre package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2024-OD86351 When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by ...
Security vulnerability affects the dnsdist package. When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IX...
CLEANSTART-2023-VR11348 Dino before 0
Security vulnerability affects the dino package. Dino before 0...
CLEANSTART-2026-JD74997 retr
Security vulnerability affects the wget package. The retr...
CLEANSTART-2026-ZT91139 CRLF injection vulnerability in the url_parse function in url
Security vulnerability affects the wget package. CRLF injection vulnerability in the urlparse function in url...