Skip to content
OpenAdvisories

Package · Alpine

etcd

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-33413

    etcd: Authorization bypasses in multiple APIs

    etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API …

    etcd-io etcd etcd etcd Debian Ubuntu Alpine Go
  • High 8.6
    CVE-2025-61732

    Potential code smuggling via doc comments in cmd/cgo

    A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

    Go toolchain cmd/cgo go golang-1.8 Debian Ubuntu Alpine Go
  • High 7.5
    CVE-2025-61726

    Memory exhaustion in query parameter parsing in net/url

    The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encode…

    Go standard library net/url go stdlib Debian Ubuntu Alpine Go
  • High 7.8
    CVE-2025-61731

    Arbitrary file write using cgo pkg-config directive in cmd/go

    Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config com…

    Go toolchain cmd/go go golang-1.13 Debian Ubuntu Alpine Go