apk package
chainguard/terraform-provider-sendgrid-fips
pkg:apk/chainguard/terraform-provider-sendgrid-fips
Vulnerabilities (102)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-31525 | Med | 5.9 | < 1.0.1-r1 | 1.0.1-r1 | May 27, 2021 | net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations. | |
| CVE-2021-33194 | Hig | 7.5 | < 1.0.1-r1 | 1.0.1-r1 | May 26, 2021 | golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input. |
- affected < 1.0.1-r1fixed 1.0.1-r1
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.
- affected < 1.0.1-r1fixed 1.0.1-r1
golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.
Page 6 of 6