rpm package
opensuse/inspektor-gadget&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/inspektor-gadget&distro=openSUSE%20Tumbleweed
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-84445 | Hig | — | < 0.57.0-1.1 | 0.57.0-1.1 | Sep 14, 2026 | gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/se | |
| CVE-2026-42504 | Hig | 7.5 | < 0.53.2-1.1 | 0.53.2-1.1 | Jun 2, 2026 | Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. |
- affected < 0.57.0-1.1fixed 0.57.0-1.1
gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/se
- affected < 0.53.2-1.1fixed 0.53.2-1.1
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.