Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-45338 EUVD-2024-3617GHSA-w32m-9786-jp63GO-2024-3333

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Published Dec 18, 2024 · Updated Feb 21, 2025 · Assigned by Go

Vendor: golang.org/x/net Product: golang.org/x/net/html Package: aactl Package: actions-runner-controller Package: actions-runner-controller-compat Package: addon-resizer Package: addon-resizer-compat Package: adsys Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-all Package: amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard Package: amazon-cloudwatch-agent-compat Package: amazon-cloudwatch-agent-config-downloader Package: amazon-cloudwatch-agent-config-translator Package: amazon-cloudwatch-agent-operator Package: amazon-cloudwatch-agent-operator-compat Package: amazon-cloudwatch-agent-start-amazon-cloudwatch-agent Package: amazon-k8s-cni Package: amazon-k8s-cni-compat Package: amazon-k8s-cni-init Package: amazon-k8s-cni-init-compat Package: apko Package: application-gateway-kubernetes-ingress Package: argo-events Package: argo-rollouts Package: argo-workflows Package: argocd-image-updater Package: argocd-image-updater-compat Package: atlantis Package: authservice Package: authservice-compat Package: aws-application-networking-k8s Package: aws-application-networking-k8s-compat Package: aws-efs-csi-driver Package: aws-load-balancer-controller Package: aws-load-balancer-controller-compat Package: aws-network-policy-agent Package: aws-network-policy-agent-compat Package: aws-privateca-issuer Package: aws-privateca-issuer-compat Package: azcopy Package: bank-vaults Package: bank-vaults-template Package: bom Package: boring-registry Package: buf Package: buildah Package: buildah Package: buildctl Package: buildkitd Package: caddy Package: caddy-man Package: caddy-src Package: cadvisor Package: cadvisor-compat Package: cass-operator Package: cass-operator-compat Package: cass-operator-config Package: cert-exporter Package: cert-manager Package: cert-manager-cmctl Package: cert-manager-istio-csr Package: cert-manager-istio-csr-compat Package: cert-manager-webhook-pdns Package: certificate-transparency Package: certificate-transparency-trillian-ctserver Package: cf-cli Package: cfssl Package: cfssl-bundle Package: cfssl-certinfo Package: cfssl-json Package: cfssl-mkbundle Package: cfssl-multirootca Package: cfssl-newkey Package: cfssl-scan Package: chartmuseum Package: chezmoi Package: cilium-cli Package: cloud-provider-aws-1.31 Package: cloud-provider-aws-1.31-cloud-controller-manager Package: cloud-provider-aws-1.31-ecr-credential-provider Package: cloudflared Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cloudprober-compat Package: cluster-proportional-autoscaler Package: cluster-proportional-autoscaler-compat Package: cni Package: cni-plugins Package: cni-plugins Package: cni-plugins-aws-k8s-compat Package: cni-plugins-bandwidth Package: cni-plugins-bandwidth-compat Package: cni-plugins-bridge Package: cni-plugins-bridge-compat Package: cni-plugins-dhcp Package: cni-plugins-dhcp-compat Package: cni-plugins-dummy Package: cni-plugins-dummy-compat Package: cni-plugins-firewall Package: cni-plugins-firewall-compat Package: cni-plugins-host-device Package: cni-plugins-host-device-compat Package: cni-plugins-host-local Package: cni-plugins-host-local-compat Package: cni-plugins-ipam Package: cni-plugins-ipvlan Package: cni-plugins-ipvlan-compat Package: cni-plugins-loopback Package: cni-plugins-loopback-compat Package: cni-plugins-macvlan Package: cni-plugins-macvlan-compat Package: cni-plugins-main Package: cni-plugins-meta Package: cni-plugins-portmap Package: cni-plugins-portmap-compat Package: cni-plugins-ptp Package: cni-plugins-ptp-compat Package: cni-plugins-sbr Package: cni-plugins-sbr-compat Package: cni-plugins-static Package: cni-plugins-static-compat Package: cni-plugins-tap Package: cni-plugins-tap-compat Package: cni-plugins-tuning Package: cni-plugins-tuning-compat Package: cni-plugins-vlan Package: cni-plugins-vlan-compat Package: cni-plugins-vrf Package: cni-plugins-vrf-compat Package: conftest Package: containerd-1 Package: containerd-2 Package: containerd-service-1 Package: containerd-service-2 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-stress-1 Package: containerd-stress-2 Package: containerd2 Package: containerized-data-importer Package: containernetworking-plugins Package: controller-gen Package: cortex Package: cosign Package: cri-o Package: cri-tools Package: cri-tools Package: crictl Package: critest Package: croc Package: crossplane-crank Package: crossplane-provider-aws Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudformation-compat Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudfront-compat Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-cloudwatchlogs-compat Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-dynamodb-compat Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-eks-compat Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-elasticache-compat Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-firehose-compat Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-iam-compat Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kinesis-compat Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-kms-compat Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-lambda-compat Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-memorydb-compat Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-rds-compat Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-s3-compat Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sns-compat Package: crossplane-provider-aws-sqs Package: crossplane-provider-aws-sqs-compat Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-authorization-compat Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-managedidentity-compat Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-azure-storage-compat Package: crossplane-provider-family-aws Package: crossplane-provider-family-aws-compat Package: crossplane-provider-family-azure Package: crossplane-provider-family-azure-compat Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctr-1 Package: ctr-2 Package: cue Package: cue-bash-completion Package: cue-fish-completion Package: cue-zsh-completion Package: dagdotdev Package: dagger Package: dasel Package: dataplaneapi Package: dbmate Package: descheduler Package: dex Package: dex-iamguarded-compat Package: dgraph Package: distribution Package: dive Package: docker-buildx Package: docker-cli-buildx Package: docker-compose Package: docker-compose Package: docker-dind Package: dockerize Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: emissary Package: emissary-apiext Package: emissary-oci-entrypoint Package: envoy-gateway Package: envoy-gateway-compat Package: envoy-gateway-egctl Package: envoy-ratelimit Package: falco-exporter Package: falcoctl Package: falcosidekick Package: ferretdb Package: filebrowser Package: filebrowser-compat Package: flannel Package: flannel-compat Package: fluent-bit-plugin-loki Package: fluent-operator Package: fluent-watcher Package: fluent-watcher-compat Package: fluent-watcher-config Package: flux Package: flux-helm-controller Package: flux-helm-controller-iamguarded-compat Package: flux-image-automation-controller Package: flux-image-automation-controller-compat Package: flux-image-automation-controller-iamguarded-compat Package: flux-image-reflector-controller Package: flux-image-reflector-controller-iamguarded-compat Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: flux-notification-controller Package: flux-notification-controller-iamguarded-compat Package: flux-source-controller Package: flux-source-controller-iamguarded-compat Package: flyte Package: fq Package: frp Package: fulcio Package: fuse-overlayfs-snapshotter Package: gcsfuse Package: gh Package: gh Package: gh-doc Package: git-lfs Package: git-lfs-config Package: gitea Package: gitea-compat Package: gitness Package: gitsign Package: gitsign-config Package: gitsign-credential-cache Package: gke-gcloud-auth-plugin Package: glab Package: glow Package: go-discover Package: go-licenses Package: gobuster Package: golang-golang-x-net Package: golang-golang-x-net Package: golang-golang-x-net-dev Package: golang.org/x/net Package: golang.org/x/net/html Package: gomplate Package: goreleaser Package: gostatsd Package: gptscript Package: gpu-feature-discovery Package: grafana-agent-operator Package: grafana-alloy Package: grafana-mimir Package: grafana-operator Package: grafana-operator-bitnami-compat Package: grafana-rollout-operator Package: grpc-health-probe Package: grpc-health-probe-compat Package: grpcurl Package: grype Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: helm Package: helm Package: helm-3 Package: helm-4 Package: helm-operator Package: helm-operator-compat Package: helm-push Package: hey Package: hubble Package: hubble-compat Package: hubble-ui Package: hubble-ui-backend Package: hugo Package: hugo-extended Package: ig Package: influxdb Package: ip-masq-agent Package: jaeger-operator Package: jaeger-operator-compat Package: jitsucom-bulker Package: jitsucom-bulker-bulker Package: jitsucom-bulker-bulker-compat Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingest-compat Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-ingmgr-compat Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-sidecar-compat Package: jitsucom-bulker-syncctl Package: jitsucom-bulker-syncctl-compat Package: juju-core Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s-1.32 Package: k3s-multicall-1.32 Package: k3s-static-1.32 Package: k6 Package: k8s-device-plugin Package: k8sgpt Package: k8sgpt-operator Package: k8sgpt-operator-compat Package: k8ssandra-client Package: k8ssandra-client-compat Package: k8ssandra-operator Package: k8ssandra-operator-compat Package: k9s Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kafka-proxy-compat Package: kaniko Package: kaniko-compat Package: kaniko-warmer Package: kaniko-warmer-compat Package: kapp Package: kapp-controller Package: kapp-controller-compat Package: kargo Package: kargo-oci-compat Package: katib-controller Package: katib-controller-compat Package: katib-db-manager Package: katib-db-manager-compat Package: katib-earlystopping Package: katib-file-metricscollector Package: katib-file-metricscollector-compat Package: katib-suggestion-goptuna Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: kbld Package: keda Package: kiali Package: kine Package: ko Package: kor Package: kots Package: kots-compat Package: kots-symlink-compat Package: kpt Package: kserve Package: kserve-agent Package: kserve-agent-compat Package: kserve-manager Package: kserve-manager-compat Package: kserve-modelmesh-serving Package: kserve-modelmesh-serving-compat Package: kserve-qpext Package: kserve-qpext-compat Package: kserve-rest-proxy Package: kserve-rest-proxy-compat Package: kserve-router Package: kserve-router-compat Package: kserve-storage-controller Package: ksops Package: ksops-compat Package: kube-bench Package: kube-bench-configs Package: kube-fluentd-operator Package: kube-fluentd-operator-compat Package: kube-fluentd-operator-default-config Package: kube-fluentd-operator-oci-entrypoint Package: kube-logging-operator Package: kube-logging-operator-compat Package: kube-logging-operator-config-reloader Package: kube-logging-operator-config-reloader-compat Package: kube-logging-operator-fluentd-outputs Package: kube-metrics-adapter Package: kube-rbac-proxy Package: kube-state-metrics Package: kube-state-metrics-iamguarded-compat Package: kube-vip Package: kube-vip-cloud-provider Package: kube-vip-compat Package: kubectl-1.27 Package: kubectl-1.27-default Package: kubectl-1.28 Package: kubectl-1.28-default Package: kubectl-1.29 Package: kubectl-1.29-default Package: kubectl-1.30 Package: kubectl-1.30-default Package: kubectl-1.31 Package: kubectl-1.32 Package: kubectl-1.32-default Package: kubectl-argo-rollouts Package: kubectl-bash-completion-1.27 Package: kubectl-bash-completion-1.28 Package: kubectl-bash-completion-1.29 Package: kubectl-bash-completion-1.30 Package: kubeflow Package: kubeflow-access-management Package: kubeflow-access-management-compat Package: kubeflow-admission-webhook Package: kubeflow-admission-webhook-compat Package: kubeflow-katib Package: kubeflow-notebook-controller Package: kubeflow-notebook-controller-compat Package: kubeflow-pipelines Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-cache-deployer Package: kubeflow-pipelines-cache-deployer-compat Package: kubeflow-pipelines-frontend Package: kubeflow-pipelines-metadata-envoy-config Package: kubeflow-pipelines-metadata-writer Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: kubeflow-profile-controller Package: kubeflow-profile-controller-compat Package: kubeflow-pvcviewer-controller Package: kubeflow-pvcviewer-controller-compat Package: kubeflow-tensorboard-controller Package: kubeflow-tensorboard-controller-compat Package: kuberay-operator Package: kuberay-operator-compat Package: kuberlr Package: kubernetes Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-attacher-compat Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-api-compat Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-auth-compat Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-metrics-scraper-compat Package: kubernetes-dashboard-web Package: kubernetes-dashboard-web-compat Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-event-exporter-iamguarded-compat Package: kubernetes-replicator Package: kubescape Package: kubevela Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevela-vela-core-compat Package: kubevirt Package: kubewatch Package: kwok Package: kwokctl Package: kyverno-notation-aws Package: kyverno-notation-aws-compat Package: kyverno-policy-reporter Package: kyverno-policy-reporter-compat Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-kyverno-plugin-compat Package: kyverno-policy-reporter-ui Package: kyverno-policy-reporter-ui-compat Package: lazygit Package: linkerd2 Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: local-static-provisioner-compat Package: local-volume-node-cleanup Package: local-volume-node-cleanup-compat Package: lvm-driver Package: lvm-driver-compat Package: mailpit Package: mailpit-compat Package: malcontent Package: mc Package: mc-iamguarded-2025-compat Package: melange Package: memcached-exporter Package: memcached-exporter-iamguarded-compat Package: metacontroller Package: metallb Package: metallb-controller Package: metallb-controller-compat Package: metallb-cp-tool Package: metallb-cp-tool-compat Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metallb-speaker-compat Package: metrics-server Package: metrics-server-compat Package: metrics-server-iamguarded-compat Package: minio Package: minio-iamguarded-2025-compat Package: minio-operator Package: minio-operator-compat Package: minio-operator-sidecar Package: minio-operator-sidecar-compat Package: mkcert Package: mods Package: mps-control-daemon Package: multus Package: multus-cni Package: multus-cni-compat Package: nats Package: nerdctl Package: neuvector-scanner Package: neuvector-scanner-monitor Package: neuvector-scanner-task Package: neuvector-sigstore-interface Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-k8s-metadata-injection Package: newrelic-k8s-metadata-injection-compat Package: newrelic-nri-kube-events Package: newrelic-nri-statsd Package: nfs-subdir-external-provisioner Package: nginx-prometheus-exporter Package: nginx-prometheus-exporter-iamguarded-compat Package: node-problem-detector Package: nodetaint Package: nri-discovery-kubernetes Package: nri-discovery-kubernetes-compat Package: nri-kafka Package: nri-kubernetes Package: nri-prometheus Package: nsc Package: nuclei Package: nvidia-device-plugin Package: oauth2-proxy Package: oauth2-proxy-iamguarded-compat Package: octo-sts Package: octo-sts-webhook Package: ollama Package: ollama-cpu Package: opa Package: opa-envoy Package: openbao Package: openbao-compat Package: openbao-k8s Package: openbao-k8s-compat Package: opensearch-k8s-operator Package: opensearch-k8s-operator-compat Package: opentelemetry-collector Package: opentelemetry-collector-compat Package: opentelemetry-collector-contrib Package: opentelemetry-collector-contrib-compat Package: opentelemetry-collector-ocb Package: opentelemetry-operator Package: opentelemetry-operator-compat Package: opentelemetry-operator-otel-allocator Package: opentelemetry-operator-otel-allocator-compat Package: osv-scanner Package: packer Package: pluto Package: pluto-compat Package: podman Package: podman Package: podman-doc Package: policy-controller Package: policy-controller-tester Package: portieris Package: portieris-compat Package: postgres-operator Package: postgres-operator-compat Package: prometheus-adapter Package: prometheus-adapter Package: prometheus-admission-webhook Package: prometheus-alertmanager Package: prometheus-alertmanager-iamguarded-compat Package: prometheus-config-reloader Package: prometheus-operator Package: prometheus-operator-iamguarded-compat Package: prometheus-pushgateway Package: prometheus-pushgateway-iamguarded-compat Package: promxy Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-go Package: pulumi-language-java Package: pulumi-language-nodejs Package: pulumi-language-python Package: pulumi-language-yaml Package: py3.10-ambassador Package: py3.11-ambassador Package: py3.12-ambassador Package: py3.13-ambassador Package: q Package: rabbitmq-cluster-operator Package: rabbitmq-cluster-operator-compat Package: rabbitmq-cluster-operator-iamguarded-compat Package: rabbitmq-messaging-topology-operator Package: rabbitmq-messaging-topology-operator-compat Package: rabbitmq-messaging-topology-operator-iamguarded-compat Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-fleet-termination-log Package: rclone Package: rclone Package: rclone-compat Package: rekor Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: restic Package: restic-compat Package: rook Package: rook-oci-compat Package: rootlesskit Package: rootlesskit-config-nonroot Package: rqlite Package: rqlite-oci-entrypoint Package: runc Package: runc-doc Package: scorecard Package: seaweedfs Package: seaweedfs-iamguarded-compat Package: seaweedfs-oci-entrypoint Package: secrets-store-csi-driver Package: secrets-store-csi-driver-crds Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-geoipfilter Package: sftpgo-plugin-kms Package: sftpgo-plugin-pubsub Package: sigstore-scaffolding Package: sigstore-scaffolding-cloudsqlproxy Package: sigstore-scaffolding-ctlog-createctconfig Package: sigstore-scaffolding-ctlog-managectroots Package: sigstore-scaffolding-ctlog-verifyfulcio Package: sigstore-scaffolding-fulcio-createcerts Package: sigstore-scaffolding-getoidctoken Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-trillian-createdb Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-createsecret Package: sigstore-scaffolding-tuf-server Package: skaffold Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: snyk-cli Package: sonobuoy Package: sonobuoy-compat Package: sops Package: spark-operator Package: spark-operator-oci-entrypoint Package: spegel Package: spegel-compat Package: spicedb Package: spicedb-compat Package: spiffe-helper Package: spiffe-helper-compat Package: spire-agent Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: splunk-otel-collector-compat Package: splunk-otel-collector-doc Package: spqr Package: sql_exporter Package: src Package: src-fingerprint Package: sriov-network-device-plugin Package: sriov-network-device-plugin Package: sriov-network-device-plugin-entrypoint Package: stakater-reloader Package: stakater-reloader-compat Package: step Package: step-ca Package: step-issuer Package: step-issuer-compat Package: stern Package: syft Package: tailscale Package: tailscale-compat Package: task Package: tdbg Package: tdbg-compat Package: tekton-chains Package: telegraf Package: temporal Package: temporal-cassandra-tool Package: temporal-cassandra-tool-compat Package: temporal-compat Package: temporal-server Package: temporal-server-compat Package: temporal-server-oci-entrypoint Package: temporal-server-schema Package: temporal-sql-tool Package: temporal-sql-tool-compat Package: temporal-ui-server Package: temporal-ui-server-oci-entrypoint Package: terraform Package: terraform Package: terraform-compat Package: terraform-docs Package: terraform-local-provider-config Package: terraform-provider-aws Package: terraform-provider-azurerm Package: terraform-provider-google Package: terraform-provider-pagerduty Package: terraform-provider-sendgrid Package: terraform-provider-tls Package: terragrunt Package: terragrunt-docs Package: tflint Package: tflint-compat Package: tfsec Package: thanos Package: thanos-iamguarded-compat Package: thanos-operator Package: thanos-operator-compat Package: timestamp-authority Package: timestamp-authority-cli Package: timestamp-authority-server Package: timoni Package: tkn Package: trillian Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trust-manager Package: undock Package: up Package: vault-benchmark Package: vault-benchmark-compat Package: vault-k8s Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero Package: velero-compat Package: velero-plugin-for-aws Package: velero-plugin-for-aws-compat Package: velero-plugin-for-csi Package: velero-plugin-for-csi-compat Package: velero-plugin-for-microsoft-azure Package: velero-plugin-for-microsoft-azure-compat Package: velero-restore-helper Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-recommender Package: vertical-pod-autoscaler-updater Package: vexctl Package: victoriametrics Package: victoriametrics-cluster Package: victoriametrics-compat Package: victoriametrics-operator Package: victoriametrics-operator-compat Package: victoriametrics-vmagent Package: victoriametrics-vmagent-cluster Package: victoriametrics-vmagent-cluster-compat Package: victoriametrics-vmagent-compat Package: victoriametrics-vmalert Package: victoriametrics-vmalert-cluster Package: victoriametrics-vmalert-cluster-compat Package: victoriametrics-vmalert-compat Package: victoriametrics-vmauth Package: victoriametrics-vmauth-compat Package: victoriametrics-vminsert-cluster Package: victoriametrics-vminsert-cluster-compat Package: victoriametrics-vmselect-cluster Package: victoriametrics-vmselect-cluster-compat Package: victoriametrics-vmstorage-cluster Package: victoriametrics-vmstorage-cluster-compat Package: vitess Package: volume-modifier-for-k8s Package: wal-g Package: wal-g-pg Package: wave Package: weaviate Package: whereabouts Package: whereabouts-compat Package: wireguard-go Package: wolfictl Package: wuzz Package: x509-certificate-exporter Package: yq Package: yq-go Package: yunikorn-k8shim Package: yunikorn-k8shim-compat Package: zarf Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

Affected products

VendorProductAffectedFixed
golang.org/x/net golang.org/x/net/html < 0.33.0 0.33.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-golang-x-net 1:0.27.0-2 —
Debian 13 golang-golang-x-net 1:0.27.0-2 —
Debian 12 golang-golang-x-net No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-golang-x-net No fix yet —
Ubuntu 26.04 LTS golang-golang-x-net No fix yet —
Ubuntu 25.10 golang-golang-x-net No fix yet —
Ubuntu 24.04 LTS adsys 0.14.3~24.04ubuntu0.1 USN-7197-1
Ubuntu 22.04 LTS adsys 0.14.3~22.04ubuntu0.1 USN-7197-1
Ubuntu 22.04 LTS golang-golang-x-net 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1 USN-8900-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS adsys 0.9.2~20.04.2ubuntu0.1 USN-7197-1
Ubuntu Pro 24.04 LTS golang-golang-x-net 1:0.21.0+dfsg-1ubuntu0.1~esm1 USN-7197-1
Ubuntu Pro 22.04 LTS golang-golang-x-net 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm1 USN-7197-1
Ubuntu Pro 20.04 LTS golang-golang-x-net-dev 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm1 USN-7197-1
Ubuntu Pro 18.04 LTS golang-golang-x-net-dev 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm1 USN-7197-1
Ubuntu Pro 16.04 LTS golang-golang-x-net-dev 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm1 USN-7197-1
Ubuntu Pro 16.04 LTS juju-core 2.3.7-0ubuntu0.16.04.1+esm1 USN-7197-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 kubevirt 1.5.2-150700.3.5.2 SUSE-SU-2025:02581-1
SLES 15 SP6 apptainer 1.3.6-150600.4.9.1 SUSE-SU-2025:0980-1
SLES 15 SP6 govulncheck-vulndb 0.0.20250108T191942-150000.1.26.1 SUSE-SU-2025:0060-1
SLES 15 SP6 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SLES 15 SP6 kubevirt 1.4.1-150600.5.24.1 SUSE-SU-2025:03278-1
SLES 15 SP5 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SLES 15 SP4 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SLES 15 SP3 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP5 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SLES for SAP 15 SP4 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SLES for SAP 15 SP3 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SLE Micro 6.1 helm 3.17.2-slfo.1.1_1.1 SUSE-SU-2025:20278-1
SLE Micro 6.0 helm 3.17.2-1.1 SUSE-SU-2025:20196-1
SLE Micro 5.5 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SLE HPC 15 SP5 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SLE HPC 15 SP4 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SLE HPC 15 SP3 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
SUSE Package Hub 15 SP6 gitea-tea 0.9.2-bp156.5.1 openSUSE-SU-2025:0094-1
SUSE Package Hub 15 SP6 trivy 0.58.2-bp156.2.6.1 openSUSE-SU-2025:0056-1
SUSE Enterprise Storage 7.1 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed apptainer 1.3.6-5.1 openSUSE-SU-2025:14909-1
openSUSE Tumbleweed govulncheck-vulndb 0.0.20241218T202206-1.1 openSUSE-SU-2024:14603-1
openSUSE Tumbleweed hauler 1.1.1-2.1 openSUSE-SU-2025:14711-1
openSUSE Tumbleweed helm 3.17.0-2.1 openSUSE-SU-2025:14725-1
openSUSE Tumbleweed helm3 3.19.2-1.1 openSUSE-SU-2025:15779-1
openSUSE Tumbleweed helmfile 0.170.0-1.1 openSUSE-SU-2025:14666-1
openSUSE Tumbleweed kepler 0.7.11-2.1 openSUSE-SU-2025:14640-1
openSUSE Tumbleweed kubelogin 0.1.7-1.1 openSUSE-SU-2025:14721-1
openSUSE Tumbleweed kubeseal 0.41.1-1.1 openSUSE-SU-2026:12299-1
openSUSE Tumbleweed kumactl 3.0.0-1.1 openSUSE-SU-2026:12300-1
openSUSE Tumbleweed kured 1.17.1-1.1 openSUSE-SU-2025:14907-1
openSUSE Tumbleweed lux 0.24.1-1.1 openSUSE-SU-2026:11294-1
openSUSE Tumbleweed operator-sdk 1.39.0-1.1 openSUSE-SU-2025:14634-1
openSUSE Tumbleweed rclone 1.69.0-1.1 openSUSE-SU-2025:14641-1
openSUSE Tumbleweed sops 3.9.3-1.1 openSUSE-SU-2025:14612-1
openSUSE Tumbleweed teleport 17.1.0-1.1 openSUSE-SU-2024:14606-1
openSUSE Tumbleweed timoni 0.36.0-1.1 openSUSE-SU-2026:12309-1
openSUSE Tumbleweed traefik 3.4.3-1.1 openSUSE-SU-2025:15304-1
openSUSE Tumbleweed traefik2 2.11.26-1.1 openSUSE-SU-2025:15305-1
openSUSE Tumbleweed trivy 0.58.2-1.1 openSUSE-SU-2025:14713-1
openSUSE Tumbleweed velero 1.15.1-1.1 openSUSE-SU-2025:14613-1
openSUSE Tumbleweed velociraptor 0.7.0.4.git142.862ef23-1.1 openSUSE-SU-2025:14663-1
openSUSE Tumbleweed yq 4.44.6-1.1 openSUSE-SU-2025:14639-1
openSUSE Leap 16.0 gitea-tea 0.15.1-bp160.1.1 openSUSE-SU-2026:21603-1
openSUSE Leap 16.0 glab 1.114.0-bp160.1.1 openSUSE-SU-2026:21662-1
openSUSE Leap 16.0 hauler 1.3.1-bp160.1.1 openSUSE-SU-2025:20160-1
openSUSE Leap 16.0 helmfile 1.1.9-bp160.1.1 openSUSE-SU-2025:20097-1
openSUSE Leap 16.0 lux 0.24.1-bp160.1.1 openSUSE-SU-2026:21367-1
openSUSE Leap 15.6 apptainer 1.3.6-150600.4.9.1 SUSE-SU-2025:0980-1
openSUSE Leap 15.6 gitea-tea 0.9.2-bp156.5.1 openSUSE-SU-2025:0094-1
openSUSE Leap 15.6 govulncheck-vulndb 0.0.20250108T191942-150000.1.26.1 SUSE-SU-2025:0060-1
openSUSE Leap 15.6 helm 3.17.1-150000.1.41.1 SUSE-SU-2025:0602-1
openSUSE Leap 15.6 kubevirt 1.4.1-150600.5.24.1 SUSE-SU-2025:03278-1
openSUSE Leap 15.6 trivy 0.58.2-bp156.2.6.1 openSUSE-SU-2025:0056-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 rclone 1.69.0-r0 —
Alpine v3.24 yq-go 4.45.1-r0 —
Alpine v3.23 rclone 1.69.0-r0 —
Alpine v3.23 yq-go 4.45.1-r0 —
Alpine v3.22 rclone 1.69.0-r0 —
Alpine v3.22 yq-go 4.45.1-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300052.1-1.amzn2023 ALAS2023-2025-880
Amazon Linux 2023 ecs-init 1.89.2-1.amzn2023 ALAS2023-2025-879
Amazon Linux 2023 nerdctl 2.0.3-1.amzn2023.0.1 ALAS2023-2025-833
Amazon Linux 2023 runfinch-finch 1.6.0-1.amzn2023.0.1 ALAS2023-2025-834, ALAS2023-2025-816
Amazon Linux 2023 soci-snapshotter 0.9.0-1.amzn2023.0.1 ALAS2023-2025-858
Amazon Linux 2 amazon-cloudwatch-agent 1.300052.1-1.amzn2 ALAS2-2025-2779
Amazon Linux 2 nerdctl 2.0.3-1.amzn2.0.1 ALAS2-2025-2749

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 application-gateway-kubernetes-ingress 1.7.2-3 —
Azure Linux 3 buildah 1.41.4-2 —
Azure Linux 3 cert-manager 1.12.15-1 —
Azure Linux 3 cf-cli 8.7.3-5 —
Azure Linux 3 cni 1.1.2-4 —
Azure Linux 3 cni-plugins 1.4.0-2 —
Azure Linux 3 containerd2 2.0.0-3 —
Azure Linux 3 containerized-data-importer 1.57.0-8 —
Azure Linux 3 cri-o No fix yet —
Azure Linux 3 cri-tools 1.32.0-1 —
Azure Linux 3 dasel 2.8.1-2 —
Azure Linux 3 docker-buildx 0.14.0-3 —
Azure Linux 3 docker-compose 2.27.0-3 —
Azure Linux 3 gh 2.62.0-5 —
Azure Linux 3 helm 3.15.2-2 —
Azure Linux 3 ig 0.32.0-3 —
Azure Linux 3 influxdb 2.7.3-9 —
Azure Linux 3 keda 2.14.1-2 —
Azure Linux 3 kube-vip-cloud-provider 0.0.10-3 —
Azure Linux 3 kubernetes 1.30.3-2 —
Azure Linux 3 kubevirt 1.2.0-12 —
Azure Linux 3 multus 4.0.2-4 —
Azure Linux 3 node-problem-detector 0.8.15-3 —
Azure Linux 3 packer 1.9.5-7 —
Azure Linux 3 podman 5.6.1-2 —
Azure Linux 3 prometheus-adapter 0.12.0-2 —
Azure Linux 3 sriov-network-device-plugin 3.7.0-2 —
Azure Linux 3 telegraf 1.31.0-4 —
Azure Linux 2 (CBL-Mariner) application-gateway-kubernetes-ingress 1.4.0-24 —
Azure Linux 2 (CBL-Mariner) cert-manager 1.11.2-17 —
Azure Linux 2 (CBL-Mariner) cf-cli 8.4.0-23 —
Azure Linux 2 (CBL-Mariner) cni 1.0.1-20 —
Azure Linux 2 (CBL-Mariner) cni-plugins 1.3.0-7 —
Azure Linux 2 (CBL-Mariner) containerized-data-importer 1.55.0-22 —
Azure Linux 2 (CBL-Mariner) cri-o 1.22.3-9 —
Azure Linux 2 (CBL-Mariner) cri-tools 1.29.0-6 —
Azure Linux 2 (CBL-Mariner) gh 2.13.0-24 —
Azure Linux 2 (CBL-Mariner) helm 3.14.2-5 —
Azure Linux 2 (CBL-Mariner) influxdb 2.6.1-19 —
Azure Linux 2 (CBL-Mariner) keda 2.4.0-25 —
Azure Linux 2 (CBL-Mariner) kubernetes 1.28.4-14 —
Azure Linux 2 (CBL-Mariner) kubevirt 0.59.0-23 —
Azure Linux 2 (CBL-Mariner) multus 4.0.2-7 —
Azure Linux 2 (CBL-Mariner) packer 1.9.5-7 —
Azure Linux 2 (CBL-Mariner) podman +2 No fix yet —
Azure Linux 2 (CBL-Mariner) prometheus-adapter 0.10.0-16 —
Azure Linux 2 (CBL-Mariner) sriov-network-device-plugin 3.6.2-7 —
Azure Linux 2 (CBL-Mariner) telegraf 1.29.4-10 —
Azure Linux 2 (CBL-Mariner) terraform 1.3.2-21 —
Azure Linux 2 (CBL-Mariner) vitess 17.0.7-3 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r21 —
Wolfi rolling actions-runner-controller +1 0.10.1-r1 —
Wolfi rolling addon-resizer +1 1.8.22-r4 —
Wolfi rolling amass 4.2.0-r15 —
Wolfi rolling amazon-cloudwatch-agent +6 1.300051.0-r2 —
Wolfi rolling amazon-k8s-cni +3 1.19.0-r1 —
Wolfi rolling apko 0.25.5-r0 —
Wolfi rolling argo-events +2 1.9.3-r2 —
Wolfi rolling argo-rollouts +1 1.7.2-r3 —
Wolfi rolling argo-workflows 3.6.2-r2 —
Wolfi rolling argocd-image-updater +1 0.15.1-r1 —
Wolfi rolling atlantis +1 0.31.0-r2 —
Wolfi rolling authservice +1 1.0.3-r3 —
Wolfi rolling aws-application-networking-k8s +1 1.1.0-r1 —
Wolfi rolling aws-efs-csi-driver 2.1.2-r3 —
Wolfi rolling aws-network-policy-agent +1 1.2.0-r1 —
Wolfi rolling azcopy 10.27.1-r2 —
Wolfi rolling bank-vaults +1 1.20.4-r22 —
Wolfi rolling bom 0.6.0-r13 —
Wolfi rolling boring-registry 0.15.4-r4 —
Wolfi rolling buf 1.47.2-r3 —
Wolfi rolling buildah +2 1.38.0-r2 —
Wolfi rolling buildctl +1 0.18.2-r1 —
Wolfi rolling caddy +2 2.8.4-r7 —
Wolfi rolling cadvisor +1 0.51.0-r2 —
Wolfi rolling cass-operator +2 1.23.0-r1 —
Wolfi rolling cert-exporter +2 2.14.0-r2 —
Wolfi rolling cert-manager-cmctl 2.1.1-r3 —
Wolfi rolling cert-manager-webhook-pdns 2.5.1-r9 —
Wolfi rolling certificate-transparency +1 1.3.0-r3 —
Wolfi rolling cfssl +7 1.6.5-r13 —
Wolfi rolling chartmuseum 0.16.2-r9 —
Wolfi rolling chezmoi 2.56.0-r2 —
Wolfi rolling cilium-cli 0.16.22-r2 —
Wolfi rolling cloud-provider-aws-1.31 +2 1.31.4-r2 —
Wolfi rolling cloudflared 2024.12.2-r1 —
Wolfi rolling cloudnative-pg +1 1.24.1-r2 —
Wolfi rolling cloudprober +1 0.13.8-r2 —
Wolfi rolling cluster-proportional-autoscaler +1 1.9.0-r2 —
Wolfi rolling cni-plugins +40 1.6.1-r2 —
Wolfi rolling conftest 0.56.0-r2 —
Wolfi rolling controller-gen 0.16.5-r1 —
Wolfi rolling cortex 1.18.1-r3 —
Wolfi rolling cosign 2.4.1-r4 —
Wolfi rolling crictl +2 1.32.0-r2 —
Wolfi rolling croc 10.1.3-r3 —
Wolfi rolling crossplane-crank 1.18.2-r1 —
Wolfi rolling crossplane-provider-azure-sql +9 1.10.1-r1 —
Wolfi rolling ctr-1 +4 1.7.24-r4 —
Wolfi rolling ctr-2 +6 2.0.1-r1 —
Wolfi rolling cue +3 0.11.1-r1 —
Wolfi rolling dagdotdev 0.0.12-r1 —
Wolfi rolling dagger 0.15.1-r2 —
Wolfi rolling dataplaneapi 3.1.4-r0 —
Wolfi rolling dbmate 2.24.0-r3 —
Wolfi rolling dex +1 2.41.1-r3 —
Wolfi rolling dgraph 24.0.5-r2 —
Wolfi rolling distribution 3.0.0-r4 —
Wolfi rolling dive 0.12.0-r13 —
Wolfi rolling docker-cli-buildx 0.19.3-r1 —
Wolfi rolling docker-compose 2.32.1-r1 —
Wolfi rolling docker-dind 27.4.1-r1 —
Wolfi rolling dockerize 0.9.1-r1 —
Wolfi rolling doppler-kubernetes-operator 1.5.1-r7 —
Wolfi rolling dynamic-localpv-provisioner 4.1.2-r2 —
Wolfi rolling eksctl 0.199.0-r1 —
Wolfi rolling emissary +6 3.9.1-r7 —
Wolfi rolling envoy-gateway +2 1.2.4-r1 —
Wolfi rolling envoy-ratelimit 0.0.0_git20241216-r1 —
Wolfi rolling falco-exporter 0.8.7-r1 —
Wolfi rolling falcoctl 0.10.1-r2 —
Wolfi rolling falcosidekick 2.30.0-r2 —
Wolfi rolling ferretdb 1.24.0-r4 —
Wolfi rolling filebrowser +1 2.31.2-r2 —
Wolfi rolling flannel +1 0.26.2-r2 —
Wolfi rolling fluent-bit-plugin-loki 3.3.2-r1 —
Wolfi rolling fluent-watcher +3 3.2.0-r5 —
Wolfi rolling flux 2.4.0-r2 —
Wolfi rolling flux-helm-controller +1 1.1.0-r3 —
Wolfi rolling flux-image-automation-controller +2 0.39.0-r4 —
Wolfi rolling flux-image-reflector-controller +1 0.33.0-r5 —
Wolfi rolling flux-kustomize-controller +3 1.4.0-r3 —
Wolfi rolling flux-source-controller +1 1.4.1-r5 —
Wolfi rolling flyte 1.14.1-r1 —
Wolfi rolling fq +2 0.13.0-r2 —
Wolfi rolling frp 0.61.1-r1 —
Wolfi rolling fulcio 1.6.5-r3 —
Wolfi rolling gcsfuse 1.4.2-r13 —
Wolfi rolling gh +1 2.63.2-r2 —
Wolfi rolling git-lfs +1 3.6.0-r4 —
Wolfi rolling gitea +1 1.22.6-r1 —
Wolfi rolling gitness 3.0.1-r2 —
Wolfi rolling gitsign +2 0.11.0-r4 —
Wolfi rolling gke-gcloud-auth-plugin 0.0.2-r15 —
Wolfi rolling glab 1.51.0-r1 —
Wolfi rolling glow 2.0.0-r3 —
Wolfi rolling go-discover 0_git20241218-r1 —
Wolfi rolling go-licenses 1.6.0-r19 —
Wolfi rolling gobuster 3.6.0-r16 —
Wolfi rolling gomplate 4.3.0-r1 —
Wolfi rolling goreleaser 2.5.0-r1 —
Wolfi rolling gostatsd 28.3.0-r8 —
Wolfi rolling gptscript 0.9.5-r3 —
Wolfi rolling grafana-agent-operator 0.43.4-r3 —
Wolfi rolling grafana-alloy 1.5.1-r2 —
Wolfi rolling grafana-mimir 2.14.2-r2 —
Wolfi rolling grafana-operator +1 5.15.1-r1 —
Wolfi rolling grpc-health-probe +1 0.4.36-r1 —
Wolfi rolling grpcurl 1.9.2-r2 —
Wolfi rolling grype 0.86.1-r1 —
Wolfi rolling guac +4 0.12.3-r1 —
Wolfi rolling harbor-registry 3.0.0_alpha1-r9 —
Wolfi rolling harbor-scanner-trivy 0.32.3-r0 —
Wolfi rolling hcloud 1.49.0-r3 —
Wolfi rolling helm 3.16.4-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-push 0.10.4-r17 —
Wolfi rolling hey 0.1.4-r17 —
Wolfi rolling hubble +1 1.16.5-r1 —
Wolfi rolling hubble-ui +1 0.13.1-r8 —
Wolfi rolling hugo +1 0.140.0-r1 —
Wolfi rolling ip-masq-agent 2.12.0-r2 —
Wolfi rolling jaeger-operator +1 1.62.0-r2 —
Wolfi rolling jitsucom-bulker +10 2.8.4-r3 —
Wolfi rolling k3d +2 5.7.5-r2 —
Wolfi rolling k3s-1.32 +2 1.32.7.1-r1 —
Wolfi rolling k6 0.55.1-r0 —
Wolfi rolling k8s-device-plugin +3 0.17.0-r2 —
Wolfi rolling k8sgpt 0.3.48-r2 —
Wolfi rolling k8sgpt-operator +1 0.2.4-r1 —
Wolfi rolling k8ssandra-client +1 0.6.0-r2 —
Wolfi rolling k8ssandra-operator +1 1.20.2-r1 —
Wolfi rolling k9s 0.32.7-r2 —
Wolfi rolling kaf 0.2.8-r8 —
Wolfi rolling kafka-proxy +1 0.3.12-r2 —
Wolfi rolling kafka_exporter 1.8.0-r4 —
Wolfi rolling kaniko +3 1.23.2-r7 —
Wolfi rolling kapp 0.64.0-r1 —
Wolfi rolling kapp-controller +1 0.54.1-r2 —
Wolfi rolling kargo +1 1.1.1-r2 —
Wolfi rolling kbld 0.45.0-r1 —
Wolfi rolling kiali 2.2.0-r2 —
Wolfi rolling kine 0.13.7-r1 —
Wolfi rolling ko 0.17.1-r3 —
Wolfi rolling kor 0.5.7-r1 —
Wolfi rolling kots +2 1.122.0-r1 —
Wolfi rolling kpt 1.0.0_beta55-r0 —
Wolfi rolling kserve +9 0.14.0-r3 —
Wolfi rolling kserve-modelmesh-serving +1 0.12.0-r4 —
Wolfi rolling kserve-rest-proxy +1 0.12.0-r2 —
Wolfi rolling ksops +1 4.3.2-r5 —
Wolfi rolling kube-bench +1 0.9.4-r2 —
Wolfi rolling kube-fluentd-operator +3 1.18.2-r20 —
Wolfi rolling kube-logging-operator +4 5.0.1-r0 —
Wolfi rolling kube-metrics-adapter 0.2.3-r4 —
Wolfi rolling kube-rbac-proxy 0.18.2-r2 —
Wolfi rolling kube-vip +1 0.8.7-r3 —
Wolfi rolling kubectl-1.28 +2 1.28.15-r4 —
Wolfi rolling kubectl-1.29 +2 1.29.12-r2 —
Wolfi rolling kubectl-1.30 +2 1.30.8-r2 —
Wolfi rolling kubectl-1.31 1.31.14-r0 —
Wolfi rolling kubectl-1.32 +1 1.32.0-r3 —
Wolfi rolling kubeflow +12 1.10.0-r4 —
Wolfi rolling kubeflow-katib +17 0.17.0-r8 —
Wolfi rolling kubeflow-pipelines +11 2.3.0-r5 —
Wolfi rolling kuberay-operator +1 1.2.2-r1 —
Wolfi rolling kuberlr 0.5.2-r1 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.15.0-r3 —
Wolfi rolling kubernetes-csi-external-attacher +1 4.8.0-r1 —
Wolfi rolling kubernetes-csi-external-provisioner 5.1.0-r4 —
Wolfi rolling kubernetes-csi-external-resizer 1.12.0-r1 —
Wolfi rolling kubernetes-csi-livenessprobe 2.15.0-r1 —
Wolfi rolling kubernetes-dashboard 7.10.0-r2 —
Wolfi rolling kubernetes-dashboard-api +1 1.10.1-r2 —
Wolfi rolling kubernetes-dashboard-auth +1 1.2.2-r3 —
Wolfi rolling kubernetes-dashboard-metrics-scraper +1 1.2.1-r1 —
Wolfi rolling kubernetes-dns-node-cache 1.24.0-r3 —
Wolfi rolling kubernetes-event-exporter +1 1.7-r14 —
Wolfi rolling kubernetes-replicator +2 2.11.0-r1 —
Wolfi rolling kubescape 3.0.22-r2 —
Wolfi rolling kubevela +3 1.9.13-r5 —
Wolfi rolling kubewatch 2.9.0-r2 —
Wolfi rolling kwok +1 0.6.1-r2 —
Wolfi rolling kyverno-notation-aws +1 1.0.1_git20241216-r1 —
Wolfi rolling kyverno-policy-reporter +1 2.24.2-r2 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin +1 1.6.4-r2 —
Wolfi rolling kyverno-policy-reporter-ui +1 1.9.2-r11 —
Wolfi rolling lazygit 0.44.1-r3 —
Wolfi rolling linkerd2 24.11.8-r2 —
Wolfi rolling litefs 0.5.11-r9 —
Wolfi rolling litestream 0.3.13-r8 —
Wolfi rolling local-path-provisioner 0.0.30-r2 —
Wolfi rolling local-static-provisioner +3 2.7.0-r10 —
Wolfi rolling lvm-driver +1 1.6.2-r2 —
Wolfi rolling mailpit +1 1.21.8-r0 —
Wolfi rolling malcontent 1.7.1-r1 —
Wolfi rolling mc +1 0.20241121.172154-r1 —
Wolfi rolling melange 0.18.1-r1 —
Wolfi rolling memcached-exporter +1 0.15.0-r3 —
Wolfi rolling metacontroller 4.11.21-r1 —
Wolfi rolling metallb +8 0.14.9-r2 —
Wolfi rolling metrics-server +2 0.7.2-r3 —
Wolfi rolling minio +1 0.20241218.131544-r1 —
Wolfi rolling minio-operator +3 6.0.4-r4 —
Wolfi rolling mkcert 1.4.4-r7 —
Wolfi rolling mods +2 1.6.0-r2 —
Wolfi rolling multus-cni +1 4.1.4-r1 —
Wolfi rolling nats 0.1.5-r3 —
Wolfi rolling nerdctl 2.0.2-r2 —
Wolfi rolling neuvector-scanner +2 0_git20240528-r10 —
Wolfi rolling neuvector-sigstore-interface 0_git20240801-r4 —
Wolfi rolling newrelic-infra-operator 0.21.2-r1 —
Wolfi rolling newrelic-infrastructure-agent 1.58.1-r1 —
Wolfi rolling newrelic-k8s-metadata-injection +1 1.30.3-r1 —
Wolfi rolling newrelic-nri-kube-events 2.11.3-r2 —
Wolfi rolling newrelic-nri-statsd 2.10.0-r1 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r12 —
Wolfi rolling nodetaint 0.0.4-r25 —
Wolfi rolling nri-kafka 3.10.0-r0 —
Wolfi rolling nri-kubernetes 3.32.1-r1 —
Wolfi rolling nri-prometheus 2.22.0-r2 —
Wolfi rolling nsc 2.10.1-r1 —
Wolfi rolling nuclei 3.3.7-r2 —
Wolfi rolling oauth2-proxy +1 7.7.1-r3 —
Wolfi rolling octo-sts +1 0.4.2-r4 —
Wolfi rolling ollama +1 0.5.1-r2 —
Wolfi rolling opa 0.70.0-r1 —
Wolfi rolling opa-envoy 1.2.0_p2-r2 —
Wolfi rolling openbao +1 2.1.0-r2 —
Wolfi rolling openbao-k8s +5 1.4.0-r2 —
Wolfi rolling opensearch-k8s-operator +1 2.7.0-r1 —
Wolfi rolling opentelemetry-collector +4 0.116.0-r1 —
Wolfi rolling osv-scanner 1.9.2-r0 —
Wolfi rolling pluto +1 5.20.3-r1 —
Wolfi rolling podman +1 5.3.1-r2 —
Wolfi rolling policy-controller +1 0.11.0-r2 —
Wolfi rolling portieris +1 0.13.22-r2 —
Wolfi rolling postgres-operator 1.13.0-r4 —
Wolfi rolling postgres-operator-compat 1.13.0-r5 —
Wolfi rolling prometheus-adapter 0.12.0-r5 —
Wolfi rolling prometheus-alertmanager +1 0.27.0-r13 —
Wolfi rolling prometheus-operator +3 0.79.2-r1 —
Wolfi rolling prometheus-pushgateway +1 1.10.0-r2 —
Wolfi rolling promxy 0.0.91-r3 —
Wolfi rolling pulumi +3 3.143.0-r1 —
Wolfi rolling pulumi-kubernetes-operator 1.16.0-r5 —
Wolfi rolling pulumi-language-dotnet 3.71.1-r1 —
Wolfi rolling pulumi-language-java 0.20.0-r2 —
Wolfi rolling pulumi-language-yaml 1.13.0-r2 —
Wolfi rolling q 0.19.2-r11 —
Wolfi rolling rabbitmq-cluster-operator +2 2.12.1-r3 —
Wolfi rolling rancher-fleet +4 0.11.2-r2 —
Wolfi rolling rclone +1 1.68.2-r3 —
Wolfi rolling rekor +3 1.3.7-r2 —
Wolfi rolling restic +1 0.17.3-r2 —
Wolfi rolling rook +1 1.16.0-r1 —
Wolfi rolling rootlesskit +1 2.3.1-r2 —
Wolfi rolling rqlite +1 8.36.1-r2 —
Wolfi rolling runc +1 1.2.3-r1 —
Wolfi rolling scorecard 5.0.0-r4 —
Wolfi rolling seaweedfs +2 3.80-r3 —
Wolfi rolling secrets-store-csi-driver +1 1.4.7-r2 —
Wolfi rolling secrets-store-csi-driver-provider-aws 0.3.10-r1 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.7.0-r1 —
Wolfi rolling sftpgo 2.6.4-r1 —
Wolfi rolling sftpgo-plugin-auth 1.0.10-r2 —
Wolfi rolling sftpgo-plugin-eventstore +1 1.0.19-r2 —
Wolfi rolling sftpgo-plugin-geoipfilter 1.0.9-r1 —
Wolfi rolling sftpgo-plugin-kms 1.0.14-r2 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.13-r2 —
Wolfi rolling sigstore-scaffolding +13 0.7.17-r2 —
Wolfi rolling skaffold 2.13.2-r4 —
Wolfi rolling skopeo 1.17.0-r2 —
Wolfi rolling slsa-verifier 2.6.0-r7 —
Wolfi rolling smarter-device-manager 1.20.11-r11 —
Wolfi rolling snyk-cli 1.1294.3-r1 —
Wolfi rolling sonobuoy +1 0.57.2-r3 —
Wolfi rolling sops 3.9.2-r2 —
Wolfi rolling spark-operator +2 2.1.0-r1 —
Wolfi rolling spegel +1 0.0.28-r2 —
Wolfi rolling spicedb +1 1.39.1-r2 —
Wolfi rolling spiffe-helper +1 0.9.0-r2 —
Wolfi rolling spire-agent +2 1.11.1-r1 —
Wolfi rolling splunk-otel-collector +6 0.115.0-r1 —
Wolfi rolling spqr 2.2.0-r1 —
Wolfi rolling sql_exporter 0.16.0-r2 —
Wolfi rolling src 5.11.1-r0 —
Wolfi rolling src-fingerprint 0.19.0-r20 —
Wolfi rolling sriov-network-device-plugin +1 3.8.0-r1 —
Wolfi rolling stakater-reloader +1 1.2.0-r2 —
Wolfi rolling step 0.28.2-r3 —
Wolfi rolling step-ca 0.28.1-r2 —
Wolfi rolling step-issuer +1 0.9.6-r2 —
Wolfi rolling stern 1.31.0-r2 —
Wolfi rolling syft +39 1.18.1-r1 —
Wolfi rolling tailscale +1 1.78.1-r2 —
Wolfi rolling task 3.40.1-r2 —
Wolfi rolling tdbg +9 1.25.2-r2 —
Wolfi rolling temporal +1 1.1.2-r2 —
Wolfi rolling temporal-ui-server +1 2.33.0-r1 —
Wolfi rolling terraform +2 1.5.7-r19 —
Wolfi rolling terraform-docs 0.19.0-r2 —
Wolfi rolling terraform-provider-aws 5.82.2-r0 —
Wolfi rolling terraform-provider-azurerm 4.14.0-r1 —
Wolfi rolling terraform-provider-google 6.14.1-r1 —
Wolfi rolling terraform-provider-pagerduty 3.23.1-r1 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r1 —
Wolfi rolling terraform-provider-tls 4.0.6-r1 —
Wolfi rolling terragrunt +1 0.70.4-r1 —
Wolfi rolling tflint +1 0.54.0-r2 —
Wolfi rolling tfsec 1.28.11-r3 —
Wolfi rolling thanos +1 0.37.2-r2 —
Wolfi rolling thanos-operator +1 0.3.7-r23 —
Wolfi rolling timestamp-authority +2 1.2.3-r2 —
Wolfi rolling timoni +1 0.23.0-r2 —
Wolfi rolling tkn 0.39.0-r2 —
Wolfi rolling trillian +3 1.7.0-r2 —
Wolfi rolling trivy 0.58.0-r2 —
Wolfi rolling trust-manager 0.14.0-r4 —
Wolfi rolling undock 0.8.0-r3 —
Wolfi rolling up +3 No fix yet —
Wolfi rolling vault-benchmark +1 0.3.0-r2 —
Wolfi rolling vault-k8s +1 1.6.1-r1 —
Wolfi rolling vcluster +3 0.22.0-r1 —
Wolfi rolling velero +5 1.15.0-r2 —
Wolfi rolling velero-plugin-for-aws +1 1.11.0-r1 —
Wolfi rolling velero-plugin-for-csi +1 0.7.1-r8 —
Wolfi rolling velero-plugin-for-microsoft-azure +1 1.11.0-r2 —
Wolfi rolling vertical-pod-autoscaler +2 1.2.1-r2 —
Wolfi rolling vexctl 0.3.0-r3 —
Wolfi rolling victoriametrics +18 1.108.1-r1 —
Wolfi rolling victoriametrics-operator +1 0.51.1-r0 —
Wolfi rolling volume-modifier-for-k8s 0.5.0-r1 —
Wolfi rolling wal-g +1 3.0.7-r2 —
Wolfi rolling wave +1 0.10.0-r1 —
Wolfi rolling weaviate 1.28.2-r0 —
Wolfi rolling whereabouts +1 0.8.0-r2 —
Wolfi rolling wireguard-go 0.0.20230223-r18 —
Wolfi rolling wolfictl 0.27.2-r1 —
Wolfi rolling wuzz 0.5.0-r3 —
Wolfi rolling x509-certificate-exporter 3.18.0-r0 —
Wolfi rolling yq 4.44.6-r1 —
Wolfi rolling yunikorn-k8shim +1 1.6.0-r1 —
Wolfi rolling zarf 0.45.0-r2 —
Wolfi rolling zot 2.1.1-r7 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/net < 0.33.0 0.33.0 GO-2024-3333
Go golang.org/x/net/html < 0.33.0 0.33.0 GHSA-w32m-9786-jp63

Advisories 49

References