Most recent entries from all

bdu:2025-03638

certfr-2025-avi-0341 — De multiples vulnérabilités ont été découvertes dans Traefik. Elles permettent à un attaquant de provoquer un contourne…

certfr-2025-avi-0341

Withdrawn: CLEANSTART-2026-AC01087 — During chain building, the amount of work that is done is not correctly limited when a large number of intermediate cer…

Withdrawn by the publisher.

Affected: CleanStart: gitness

Multiple security vulnerabilities affect the gitness package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details.

EUVD-2026-219119

fkie_cve-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

GHSA-6v2p-p543-phr9 — golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Affected: Go: golang.org/x/oauth2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

msrc_CVE-2025-22868 — Unexpected memory consumption during token parsing in golang.org/x/oauth2

msrc_CVE-2025-22868

openSUSE-SU-2025:0091-1 — Security update for restic

Security update for restic

RHBA-2025:3651 — Red Hat Bug Fix Advisory: Red Hat Quay v3.13.5 bug fix release

gunicorn: HTTP Request Smuggling in benoitc/gunicorn golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh jinja2: Jinja sandbox breakout through attr filter selecting format method

SUSE-SU-2025:02014-1 — Security update for ignition

Security update for ignition

UBUNTU-CVE-2025-22868

Affected: Ubuntu:16.04:LTS: golang-golang-x-oauth2, Ubuntu:18.04:LTS: golang-golang-x-oauth2, Ubuntu:20.04:LTS: golang-golang-x-oauth2, Ubuntu:22.04:LTS: golang-golang-x-oauth2, Ubuntu:24.04:LTS: golang-golang-x-oauth2, Ubuntu:25.10: golang-golang-x-oauth2, Ubuntu:26.04:LTS: golang-golang-x-oauth2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

WID-SEC-W-2025-0512 — Red Hat Advanced Cluster Security: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Advanced Cluster Securityausnutzen, um einen Denial of Service Angriff durchzuführen.