Skip to content
OpenAdvisories

Package · Wolfi

cerbos-compat

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-47910

    CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http

    When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler wit…

    Go standard library net/http katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Alpine Wolfi Go
  • Medium 6.5
    CVE-2025-55198

    Helm May Panic Due To Incorrect YAML Content

    Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring Y…

    helm helm zot kubescape Azure Linux Wolfi Go
  • Medium 6.5
    CVE-2025-55199

    Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

    Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved i…

    helm helm zot kubescape Azure Linux Wolfi Go