etcd_image

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status

golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed

golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys

golang.org/x/crypto doesn't enforce invoking key constraints

gRPC-Go has an authorization bypass via missing leading slash in :path

golang.org/x/crypto vulnerable to infinite loop on large channel writes

golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses

golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS

golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions

Go Net HTML parser is vulnerable to denial of service

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

golang.org/x/crypto: Invoking pathological inputs can lead to client panic

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking in go.opentelemetry.io/otel/sdk

Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html

Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html

Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

Opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking in go.opentelemetry.io/otel/sdk

OOB read in github.com/klauspost/compress/s2