victoriametrics-vmalert-compat

4 results · Clear filters · Feed

• Medium 4.4
  CVE-2025-22870 Public exploit

  HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be prox…

  Go standard library golang.org/x/net net/http golang.org/x/net/http/httpproxy Debian Ubuntu Azure Linux Alpine Wolfi Go
  Mar 12, 2025
• Medium 4.0
  CVE-2025-22866

  Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

  Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is en…

  Go standard library crypto/internal/nistec go zot Debian Ubuntu Alpine Wolfi Go
  Feb 6, 2025
• Medium 5.3
  CVE-2024-45338

  Non-linear parsing of case-insensitive content in golang.org/x/net/html

  An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

  golang.org/x/net golang.org/x/net/html katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 18, 2024
• Medium 4.3
  CVE-2024-34155

  Stack exhaustion in all Parse functions in go/parser

  Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.

  Go standard library go/parser katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Sep 6, 2024