Skip to content
OpenAdvisories

Package · Go

github.com/talos-systems/talos

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    GHSA-34vw-m4rh-r36p

    Talos vulnerable dependency due to race condition in Linux kernel's IP framework XFRM

    ### Impact A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds w…

    github.com/talos-systems/talos Go
  • High 7.2
    CVE-2022-36103

    Talos worker join token can be used to get elevated access level to the Talos API

    Talos Linux is a Linux distribution built for Kubernetes deployments. Talos worker nodes use a join token to get accepted into the Talos cluster. Due to improper validation of the request while signing a worker node CSR (certificate signing request) Talos con…

    siderolabs talos github.com/talos-systems/talos Go