Security Advisories

CGA-mj57-h4mg-wrcj

Published

Last updated

https://images.chainguard.dev/security/CGA-mj57-h4mg-wrcj

Package

dynamic-localpv-provisioner

Latest Update

Fixed

Fixed Version

3.4.1-r3

Aliases

Severity

7.5

High

CVSS V3

Summary

golang.org/x/net/http2 Denial of Service vulnerability

Description

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-mj57-h4mg-wrcj

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources