Skip to content
OpenAdvisories

Package · Alpine

kubo

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-22189

    QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack

    quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer to run out of memory sending a large number of `NEW_CONNECTION_ID` frames that retire old connection IDs. The receiver is supposed to respond to e…

    quic-go quic-go k3s caddy Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 7.7
    CVE-2020-26279

    Path traversal

    go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0-rc1, it is possible for path traversal to occur with DAGs containing relative paths during retrieval. This can cause…

    ipfs go-ipfs github.com/ipfs/go-ipfs kubo Alpine Go