Skip to content
OpenAdvisories

Package · Alpine

kubo

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2024-22189

    QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack

    quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer to run out of memory sending a large number of `NEW_CONNECTION_ID` frames that retire old connection IDs. The receiver is supposed to respond to e…

    quic-go quic-go golang-github-lucas-clemente-quic-go golang-github-lucas-clemente-quic-go Debian Ubuntu Alpine Go
  • Medium 6.8
    CVE-2020-26283

    Control character injection in console output

    go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could r…

    ipfs go-ipfs github.com/ipfs/go-ipfs kubo Alpine Go
  • High 7.7
    CVE-2020-26279

    Path traversal

    go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0-rc1, it is possible for path traversal to occur with DAGs containing relative paths during retrieval. This can cause…

    ipfs go-ipfs github.com/ipfs/go-ipfs kubo Alpine Go