Skip to content
OpenAdvisories

Package · Wolfi

aws-otel-collector-compat

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2025-68156

    Expr has Denial of Service via Unbounded Recursion in Builtin Functions

    Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforc…

    expr-lang expr k3s kubeflow-pipelines-apiserver Azure Linux Wolfi Go
  • Medium 5.4
    CVE-2025-47910

    CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http

    When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler wit…

    Go standard library net/http katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Alpine Wolfi Go
  • Medium 5.1
    CVE-2025-54388

    Moby's Firewalld reload makes published container ports accessible from remote hosts

    Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it …

    moby moby zot zarf Ubuntu Alpine Wolfi Go