katib-suggestion-hyperopt

83 results · Clear filters · Feed

• Medium 6.1
  CVE-2023-28155

  Server-Side Request Forgery in Request

  The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer suppo…

  katib-suggestion-hyperopt katib-earlystopping katib-suggestion-hyperband katib-suggestion-optuna-enas Debian Ubuntu Azure Linux Wolfi npm
  Mar 16, 2023
• Medium 5.3
  CVE-2022-41717 Public exploit

  Excessive memory growth in net/http and golang.org/x/net/http2

  An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large…

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 8, 2022
• Medium 6.3
  CVE-2022-41716

  Unsanitized NUL in environment variables on Windows in syscall and os/exec

  Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid environment variable values containing NUL values are not properly checked for. A malicious environment …

  Go standard library os/exec syscall katib-suggestion-hyperopt Debian Ubuntu Azure Linux Wolfi Go
  Nov 2, 2022