Package · Wolfi

flux-2.8

82 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

82 results · Feed

High 7.5

CVE-2026-27141

Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

golang.org/x/net golang.org/x/net/http2 zot zarf Ubuntu Azure Linux Alpine Wolfi Go

Feb 26, 2026
Low 2.9

CVE-2026-1229

Incorrect calculation in CIRCL secp384r1 CombinedMult

The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed…

Cloudflare CIRCL zot kubescape Ubuntu Alpine Wolfi Go

Feb 24, 2026