Search for packages
| purl | pkg:golang/istio.io/istio@1.11.7 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-q8fq-1yrc-aaag
Aliases: CVE-2022-24921 |
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression. | There are no reported fixed by versions. |
|
VCID-smme-5z7a-aaan
Aliases: CVE-2022-24726 |
CVE-2022-24726 istio: Unauthenticated control plane denial of service attack due to stack exhaustion | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-18T09:07:16.742261+00:00 | GithubOSV Importer | Fixing | VCID-wxdq-fahw-aaag | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-856q-xv3c-7f2f/GHSA-856q-xv3c-7f2f.json | 34.0.1 |
| 2024-04-23T23:03:27.015000+00:00 | GithubOSV Importer | Fixing | VCID-wxdq-fahw-aaag | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-856q-xv3c-7f2f/GHSA-856q-xv3c-7f2f.json | 34.0.0rc4 |