Skip to content
OpenAdvisories

Package · Wolfi

flux-2.10

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-78661

    Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net

    When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated …

    golang.org/x/net golang.org/x/net/html zot kots Debian Ubuntu Azure Linux Wolfi Go
  • High 8.7
    CVE-2026-116591

    compress zstd: Panic on two-block frames

    compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768.…

    klauspost compress kubescape zarf Debian Ubuntu Azure Linux Alpine Wolfi Go