Security
فارسی
All products

github.com/cloudflare/cfrpki

Go · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Misconfigured IP address field in ROA leads to OctoRPKI crashCVE-2021-3911 · GHSA-W6WW-FMFX-2X22Version ranges need review. github.com/cloudflare/cfrpki Go Medium Fix reported
OctoRPKI crashes when max iterations is reachedCVE-2022-3616 · GHSA-PMW9-567P-68PCVersion ranges need review. github.com/cloudflare/cfrpki Go Medium Fix reported
NUL character in ROA causes OctoRPKI to crashCVE-2021-3910 · GHSA-5MXH-2QFV-4G7JVersion ranges need review. github.com/cloudflare/cfrpki Go High Fix reported
OctoRPKI crashes when processing GZIP bomb returned via malicious repositoryCVE-2021-3912 · GHSA-G9WH-3VRX-R7HGVersion ranges need review. github.com/cloudflare/cfrpki Go Medium Fix reported
Infinite certificate chain depth results in OctoRPKI running foreverCVE-2021-3908 · GHSA-G5GJ-9GGF-9VMQVersion ranges need review. github.com/cloudflare/cfrpki Go Medium Fix reported
Infinite open connection causes OctoRPKI to hang foreverCVE-2021-3909 · GHSA-8CVR-4RRF-F244Version ranges need review. github.com/cloudflare/cfrpki Go Medium Fix reported
OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength valuesCVE-2021-3761 · GHSA-C8XP-8MF3-62H9Version ranges need review. github.com/cloudflare/cfrpki Go High Fix reported
Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpkiCVE-2021-3978 · GHSA-3PQH-P72C-FJ85Version ranges need review. github.com/cloudflare/cfrpki Go High Fix reported
Path traversal mitigation bypass in OctoRPKIGHSA-3JHM-87M6-X959 · GO-2022-0496Version ranges need review. github.com/cloudflare/cfrpki Go High Fix reported
Arbitrary filepath traversal via URI injection CVE-2021-3907 · GHSA-CQH2-VC2F-Q4FH github.com/cloudflare/cfrpki Go High Fix reported
Path traversal in github.com/cloudflare/cfrpki/cmd/octorpkiGHSA-8459-6RC9-8VF8 github.com/cloudflare/cfrpki Go Low Fix reported