linkerd2-proxy-init-compat

3 results · Clear filters · Feed

• Medium 6.5
  CVE-2025-47906

  Unexpected paths returned from LookPath in os/exec

  If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

  Go standard library os/exec katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Sep 18, 2025
• Medium 6.8
  CVE-2025-4673

  Sensitive headers not cleared on cross-origin redirect in net/http

  Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

  Go standard library net/http katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 11, 2025
• Medium 4.0
  CVE-2025-22866

  Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

  Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is en…

  Go standard library crypto/internal/nistec go stdlib Debian Ubuntu Alpine Wolfi Go
  Feb 6, 2025