VYPR

apk package

chainguard/multus-cni-fips

pkg:apk/chainguard/multus-cni-fips

Vulnerabilities (63)

  • CVE-2024-24787MedMay 8, 2024
    affected < 4.0.2-r5fixed 4.0.2-r5

    On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.

  • CVE-2023-45288HigApr 4, 2024
    affected < 4.0.2-r2fixed 4.0.2-r2

    An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed Ma

  • CVE-2020-8559MedJul 22, 2020
    affected < 4.1.4-r6fixed 4.1.4-r6

    The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.

Page 4 of 4