Skip to content
OpenAdvisories

Package · Wolfi

k3s-multicall-1.36

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Unscored —
    CVE-2026-97054

    HTTP/1 server crash due to MaxBytesReader header race in net/http

    For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes …

    Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 8.7
    CVE-2026-116591

    compress zstd: Panic on two-block frames

    compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768.…

    klauspost compress kubescape zarf Debian Ubuntu Azure Linux Alpine Wolfi Go