VYPR

apk package

chainguard/fluxcd-kustomize-mutating-webhook

pkg:apk/chainguard/fluxcd-kustomize-mutating-webhook

Vulnerabilities (23)

  • CVE-2025-61728MedJan 28, 2026
    affected < 0fixed 0

    archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.

  • CVE-2025-61726HigJan 28, 2026
    affected < 0.7.0-r2fixed 0.7.0-r2

    The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a la

  • CVE-2025-47907HigAug 7, 2025
    affected < 0.5.0-r2fixed 0.5.0-r2

    Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the ex

Page 2 of 2