apk package
chainguard/cluster-api-fips-1.11-clusterctl
pkg:apk/chainguard/cluster-api-fips-1.11-clusterctl
Vulnerabilities (42)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-47914 | Med | 5.3 | < 1.11.3-r1 | 1.11.3-r1 | Nov 19, 2025 | SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. | |
| CVE-2025-58187 | Hig | 7.5 | < 1.11.2-r1 | 1.11.2-r1 | Oct 29, 2025 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains. |
- affected < 1.11.3-r1fixed 1.11.3-r1
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
- affected < 1.11.2-r1fixed 1.11.2-r1
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.
Page 3 of 3