Skip to content
OpenAdvisories

Package · Wolfi

gitlab-kas-18.10

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-39882

    OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the c…

    open-telemetry opentelemetry-go zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.1
    CVE-2026-32289

    JsBraceDepth Context Tracking Bugs (XSS) in html/template

    Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template actions within JS template literals did not properly track the brace depth, le…

    Go standard library html/template golang go Debian Ubuntu Azure Linux Alpine Wolfi Go