Skip to content
OpenAdvisories

Package · Alpine

docker-cli-compose

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.8
    CVE-2026-111943 Public exploit

    Distrust compromised intermediate certificates in crypto/x509

    On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in cr…

    Go standard library crypto/x509 go stdlib Debian Ubuntu Alpine Go crates.io
  • Medium 5.5
    CVE-2022-39253 Public exploit

    Git subject to exposure of sensitive information via local clone of symbolic links

    Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (wh…

    git git git git Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-32149

    Denial of service via crafted Accept-Language header in golang.org/x/text/language

    An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

    golang.org/x/text golang.org/x/text/language gitea golang-golang-x-text Debian Ubuntu Alpine Go
  • High 7.5
    CVE-2022-27664

    golang.org/x/net/http2 Denial of Service vulnerability

    In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

    go stdlib golang-1.8 golang-1.13 Debian Ubuntu Alpine Go