apk package
chainguard/crossplane-function-auto-ready-compat
pkg:apk/chainguard/crossplane-function-auto-ready-compat
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-58187 | Hig | 7.5 | < 0.5.1-r1 | 0.5.1-r1 | Oct 29, 2025 | Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains. | |
| CVE-2025-22868 | Hig | 7.5 | < 0.5.0-r1 | 0.5.0-r1 | Feb 26, 2025 | An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. |
- affected < 0.5.1-r1fixed 0.5.1-r1
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.
- affected < 0.5.0-r1fixed 0.5.0-r1
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.