argo-cd9.7.1

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status

Authentication Bypass in dex

Critical security issues in XML encoding in github.com/dexidp/dex

gRPC-Go has an authorization bypass via missing leading slash in :path

Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code

golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses

golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys

SpdyStream: DOS on CRI

golang.org/x/crypto vulnerable to infinite loop on large channel writes

Helm's Missing YAML Content Leads To Panic

golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed

golang.org/x/crypto doesn't enforce invoking key constraints

Helm Vulnerable to denial of service through string value parsing

OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

Go JOSE Panics in JWE decryption

Helm passes repository credentials to alternate domain

Helm vulnerable to Code Injection through malicious chart.yaml content

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS

oras-go has file store write outside workingDir via symlink traversal

go-billy has path traversal vulnerabilities

oras-go blob upload vulnerable to credential forwarding via unvalidated Location header

`oras-go` tar extraction: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution

go-ntlmssp NTLM challenges can panic on malformed payloads

Helm dependency management path traversal

go-git: Worktree operations may follow symlinks

Memory exhaustion in query parameter parsing in net/url

validateSignature Loop Variable Capture Signature Bypass in goxmldsig

Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

Helm vulnerable to denial of service through through repository index file

Helm vulnerable to denial of service through schema file

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

Helm vulnerable to denial of service through string value parsing

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

go-git: Malicious reference names may modify files outside the reference storage

opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking

CIRCL has an incorrect calculation in secp384r1 CombinedMult

golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion