rpm package
opensuse/docker-stable&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/docker-stable&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-58181 | — | < 24.0.9_ce-160000.4.1 | 24.0.9_ce-160000.4.1 | Nov 19, 2025 | SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. | ||
| CVE-2025-30204 | Hig | 7.5 | < 24.0.9_ce-160000.4.1 | 24.0.9_ce-160000.4.1 | Mar 21, 2025 | golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a maliciou |
- CVE-2025-58181Nov 19, 2025affected < 24.0.9_ce-160000.4.1fixed 24.0.9_ce-160000.4.1
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
- affected < 24.0.9_ce-160000.4.1fixed 24.0.9_ce-160000.4.1
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a maliciou