apk package
chainguard/crossplane-function-environment-configs-fips
pkg:apk/chainguard/crossplane-function-environment-configs-fips
Vulnerabilities (62)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-47912 | Med | 5.3 | < 0.4.0-r4 | 0.4.0-r4 | Oct 29, 2025 | The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresse | |
| CVE-2025-22868 | Hig | 7.5 | < 0.4.0-r1 | 0.4.0-r1 | Feb 26, 2025 | An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. |
- affected < 0.4.0-r4fixed 0.4.0-r4
The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresse
- affected < 0.4.0-r1fixed 0.4.0-r1
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
Page 4 of 4