Skip to content
OpenAdvisories

Product · moby

spdystream

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-35469

    SpdyStream: DOS on CRI

    spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTING…

    moby spdystream kubescape kots Debian Ubuntu Azure Linux Alpine Wolfi Go