Most recent entries from all

bdu:2025-01010

certfr-2025-avi-0214 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2025-avi-0214

CLEANSTART-2026-BC52043 — Security fix for CVE-2024-45338 applied in: cfssl 1.5.0-r1, kserve-rest-proxy 0.12.0-r3, kube-fluentd-operator 1.18.2-r…

Affected: CleanStart: cfssl, CleanStart: kserve-rest-proxy, CleanStart: kube-fluentd-operator, CleanStart: kube-state-metrics, CleanStart: prometheus-pushgateway, CleanStart: prometheus-pushgateway-fips, CleanStart: runc

CVE-2024-45338 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

EUVD-2026-218590

fkie_cve-2024-45338

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

GHSA-w32m-9786-jp63 — Non-linear parsing of case-insensitive content in golang.org/x/net/html

Affected: Go: golang.org/x/net/html

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

msrc_CVE-2024-45338 — Non-linear parsing of case-insensitive content in golang.org/x/net/html

msrc_CVE-2024-45338

openSUSE-SU-2024:14603-1 — govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media

govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media

RHBA-2025:0409 — Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.4.1 release.

golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x nanoid: nanoid mishandles non-integer values jinja2: Jinja has a sandbox breakout through malicious filenames jinja2: Jinja has a sandbox breakout through indirect reference to format method systeminformation: Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation

SUSE-SU-2025:0060-1 — Security update for govulncheck-vulndb

Security update for govulncheck-vulndb

UBUNTU-CVE-2024-45338

Affected: Ubuntu:Pro:16.04:LTS: golang-golang-x-net-dev, Ubuntu:Pro:16.04:LTS: juju-core, Ubuntu:Pro:18.04:LTS: golang-golang-x-net-dev, Ubuntu:20.04:LTS: adsys, Ubuntu:Pro:20.04:LTS: golang-golang-x-net-dev, Ubuntu:22.04:LTS: adsys, Ubuntu:Pro:22.04:LTS: golang-golang-x-net, Ubuntu:24.04:LTS: adsys, Ubuntu:Pro:24.04:LTS: golang-golang-x-net, Ubuntu:25.10: golang-golang-x-net and 1 more

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

WID-SEC-W-2024-3728 — Golang Go (x/net/html): Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Golang Go im "x/net/html" Paket ausnutzen, um einen Denial of Service Angriff durchzuführen.