VYPR

apk package

chainguard/livekit-cli

pkg:apk/chainguard/livekit-cli

Vulnerabilities (63)

  • CVE-2025-58181Nov 19, 2025
    affected < 2.12.9-r1fixed 2.12.9-r1

    SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

  • CVE-2025-64329Nov 7, 2025
    affected < 2.12.8-r1fixed 2.12.8-r1

    containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks

  • CVE-2024-25621Nov 6, 2025
    affected < 2.12.8-r1fixed 2.12.8-r1

    containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd

Page 4 of 4