Skip to content
OpenAdvisories

Package · Wolfi

spire-agent

115 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

45 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-35255

    Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

    Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

    Microsoft Azure Identity Library for .NET Microsoft Authentication Library Azure Identity Library for Java Azure Linux Wolfi npm Maven PyPI Go NuGet
  • Medium 4.3
    CVE-2024-28180

    Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

    Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Th…

    go-jose go-jose zot kubescape Debian Azure Linux Alpine Wolfi Go
  • Medium 6.8
    CVE-2024-28122

    JWX vulnerable to a denial of service attack using compressed JWE message

    JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. This vulnerability allows an attacker with a trusted public key to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JW…

    lestrrat-go jwx falcoctl minio Wolfi Go
  • Medium 4.3
    CVE-2024-21664

    Parsing JSON serialized payload without protected field can lead to segfault

    jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload where the `signature` field is present while `protected` is absent can lead to a nil pointer dereferenc…

    lestrrat-go jwx kubescape falcoctl Wolfi Go
  • Medium 6.4
    CVE-2020-8559 Public exploit

    Privilege escalation from compromised node to cluster

    The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a ful…

    Kubernetes Kubernetes zot kots Debian Alpine Wolfi Go