Skip to content
OpenAdvisories

Package · Wolfi

kubescape

179 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

82 results · Clear filters · Feed

  • Medium 5.9
    CVE-2023-48795 Public exploit Scanner template EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

    zot kubescape kots k3d Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go crates.io
  • Medium 5.3
    CVE-2023-49290

    Malicious parameters can cause a denial of service in lestrrat-go/jwx

    lestrrat-go/jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. A p2c parameter set too high in JWE's algorithm PBES2-* could lead to a denial of service. The JWE key management algorithms based on PBKDF2 r…

    lestrrat-go jwx kubescape falcoctl Wolfi Go