Skip to content
OpenAdvisories

Package · Wolfi

minio

121 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-45290

    Memory exhaustion in multipart form parsing in net/textproto and net/http

    When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while readi…

    Go standard library net/textproto golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 5.9
    CVE-2024-24783

    Verify panics on certificates with an unknown public key algorithm in crypto/x509

    Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyC…

    Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 4.3
    CVE-2024-21664

    Parsing JSON serialized payload without protected field can lead to segfault

    jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload where the `signature` field is present while `protected` is absent can lead to a nil pointer dereferenc…

    lestrrat-go jwx kubescape falcoctl Wolfi Go
  • Medium 6.1
    CVE-2023-3978

    Improper rendering of text nodes in golang.org/x/net/html

    Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.

    golang.org/x/net golang.org/x/net/html zot kots Debian Ubuntu Azure Linux Wolfi Go