apk package

wolfi/pluto

pkg:apk/wolfi/pluto

Vulnerabilities (43)

CVE	CVSS	Affected versions	Fixed in	Published	Description
CVE-2024-24789	—	< 5.19.4-r1	5.19.4-r1	Jun 5, 2024	The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip pac
CVE-2024-24790	—	< 5.19.4-r1	5.19.4-r1	Jun 5, 2024	The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVE-2019-25210	—	< 0	0	Mar 3, 2024	An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3. It displays values of secrets when the --dry-run flag is used. This is a security concern in some use cases, such as a --dry-run call by a CI/CD tool. NOTE: the vendor's position is that this

CVE-2024-24789Jun 5, 2024
affected < 5.19.4-r1fixed 5.19.4-r1
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip pac
CVE-2024-24790Jun 5, 2024
affected < 5.19.4-r1fixed 5.19.4-r1
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVE-2019-25210Mar 3, 2024
affected < 0fixed 0
An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3. It displays values of secrets when the --dry-run flag is used. This is a security concern in some use cases, such as a --dry-run call by a CI/CD tool. NOTE: the vendor's position is that this

Page 3 of 3