influxdb

4 results · Clear filters · Feed

• Critical 9.1
  CVE-2026-78663

  Double flow control refund on HTTP/2 server streams in net/http

  The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client…

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 8, 2026
• Critical 9.6
  CVE-2026-39821

  Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

  The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege …

  Go standard library golang.org/x/net net/http net/http/internal/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  May 22, 2026
• Critical 9.1
  CVE-2024-30896 Public exploit

  InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows au…

  influxdb influxdb Ubuntu Azure Linux
  Nov 21, 2024
• Critical 9.1
  CVE-2021-4238

  Insufficient randomness in github.com/Masterminds/goutils

  Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of e…

  github.com/Masterminds/goutils github.com/Masterminds/goutils dynamic-localpv-provisioner influxdb Ubuntu Azure Linux Wolfi Go
  Dec 27, 2022