Skip to content
OpenAdvisories

Package · Wolfi

gitsign

102 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

43 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-21664

    Parsing JSON serialized payload without protected field can lead to segfault

    jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload where the `signature` field is present while `protected` is absent can lead to a nil pointer dereferenc…

    lestrrat-go jwx kubescape falcoctl Wolfi Go
  • Medium 5.9
    CVE-2023-48795 Public exploit Scanner template EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

    zot kubescape kots k3d Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go crates.io
  • Medium 5.3
    CVE-2023-49290

    Malicious parameters can cause a denial of service in lestrrat-go/jwx

    lestrrat-go/jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. A p2c parameter set too high in JWE's algorithm PBES2-* could lead to a denial of service. The JWE key management algorithms based on PBKDF2 r…

    lestrrat-go jwx kubescape falcoctl Wolfi Go