gitleaks

43 results · Feed

• High 7.5
  CVE-2023-45288 Public exploit EPSS 89%

  HTTP/2 CONTINUATION flood in net/http

  An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a reques…

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 4, 2024
• High 7.5
  CVE-2021-38561

  golang.org/x/text/language Out-of-bounds Read vulnerability

  golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.

  k3d k3d-proxy k3d-tools podman Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 26, 2022
• High 7.5
  CVE-2022-32149

  Denial of service via crafted Accept-Language header in golang.org/x/text/language

  An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

  golang.org/x/text golang.org/x/text/language k3d k3d-proxy Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 14, 2022