Package Search Help

You can use boolean logic (e.g. AND/OR/NOT) for complex search queries. For more help and examples, see the search documentation.

Search by package name:
my-package (implicit)
name:my-package (explicit)

Search by package filename:
filename:my-package.ext 

Search by package tag:
tag:latest 

Search by package version:
version:1.0.0  prerelease:true (prereleases)
prerelease:false (no prereleases)

Search by package architecture:
architecture:x86_64 

Search by package distribution:
distribution:el 

Search by package license:
license:MIT 

Search by package format:
format:deb 

Search by package status:
status:in_progress 

Search by package file checksum:
checksum:5afba 

Search by package security status:
severity:critical 

Search by package vulnerabilities:
vulnerabilities:>1 
vulnerabilities:<1000 

Search by # of package downloads:
downloads:>8 
downloads:<100 

Search by package type:
type:binary 
type:source 

Search by package size (bytes):
size:>50000 
size:<10000 

Search by dependency name/version:
dependency:log4j 
dependency:log4j=1.0.0 
dependency:log4j>1.0.0 

Search by uploaded date:
uploaded:>"1 day ago" 
uploaded:<"August 14, 2022 EST" 

Search by entitlement token (identifier):
entitlement:3lKPVJPosCsY 

Search by policy violation:
policy_violated:true
deny_policy_violated:true
license_policy_violated:true
vulnerability_policy_violated:true

Search by repository:
repository:repo-name

Search by last download date:
last_downloaded:<"30 days ago" 
last_downloaded:>"August 14, 2022 EST" 

Search queries for all Debian-specific (and related) package types

Search by component:
deb_component:unstable

Search queries for all Maven-specific (and related) package types

Search by group ID:
maven_group_id:org.apache

Search queries for all Docker-specific (and related) package types

Search by image digest:
docker_image_digest:sha256:7c5..6d4
(full hashref only)

Search by layer digest:
docker_layer_digest:sha256:4c4..ae4
(full hashref only)

Search queries for all Generic-specific package types

Search by file path:
generic_filepath:path/to/file.txt

Search by directory:
generic_directory:path/to

Field type modifiers (depending on the type, you can influence behaviour)

For all queries, you can use:
~foo for negation

For string queries, you can use:
^foo to anchor to start of term
foo$ to anchor to end of term
foo*bar for fuzzy matching

For number/date or version queries, you can use:
>foo for values greater than
>=foo for values greater / equal
<foo for values less than
<=foo for values less / equal

Need a secure and centralised artifact repository to deliver Alpine, Cargo, CocoaPods, Composer, Conan, Conda, CRAN, Dart, Debian, Docker, Generic, Go, Helm, Hex, HuggingFace, LuaRocks, Maven, MCP, Nix, npm, NuGet, P2, Python, RedHat, Ruby, Swift, Terraform, Vagrant, VSX, Raw & More packages?

Cloudsmith is the new standard in Package / Artifact Management and Software Distribution.

With support for all major package formats, you can trust us to manage your software supply chain.

Start My Free Trial
Set Me Up
 Public — eventstore eventstore (Kurrent) / kurrent-latest
A certifiably-awesome public package repository curated by Kurrent, hosted by Cloudsmith.
Packages 223 Package Groups 8 Public Keys

Docker logo kurrentdb-operator-catalog  890f768d95363c52b7d75eaecaf…

Download

One-liner (summary)

A certifiably-awesome package curated by ryan-b, hosted by Cloudsmith.

Description

A certifiably-awesome package curated by ryan-b, hosted by Cloudsmith.

License

Unknown

Size

28.3 MB

Downloads

17

Tags

image amd64 linux

Status  Completed
Checksum (MD5) eafd92e80d5ccc2252ce277ae2dd2d25
Checksum (SHA-1) 946931879e8e046200a10e12d5e648b469de6bcc
Checksum (SHA-256) 890f768d95363c52b7d75eaecafaaef5e7788749565d23eabb857a864e9032b1
Checksum (SHA-512) 84852f465407a2702fc845ceed6c564d6adb2b66c09c1ba53335a2ae612729f2dd…
GPG Signature
Download
GPG Fingerprint 02a89004460aa252035d6b7d094442d90ad50bcd
Storage Region  Dublin, Ireland
Type  Binary (contains binaries and binary artifacts)
Uploaded At 8 months, 3 weeks ago
Uploaded By ryan-b
Slug Id kurrentdb-operator-catalog-8w4l
Unique Id kEKTcEuNkgkR
Version (Raw) 890f768d95363c52b7d75eaecafaaef5e7788749565d23eabb857a864e9032b1
Version (Parsed)
  • Type: Unknown
  docker-specific metadata
Image Digest sha256:890f768d95363c52b7d75eaecafaaef5e7788749565d23eabb857a864e9032b1
Config Digest sha256:9e3451de7463fb456d6c4361b6eb9672c118a2c6851dd4f458b55c26f8c59cd6
V1 OCI Index Digest sha256:b9f31d5152e79f7729767b6f7da575092b995a3ae4f7680ba7702483d86f50fb
V1 Distribution (Signed) Digest sha256:532b4394477d22c1f5a8d74835d1e606a53fa322ae6d0ff026e97e273dc101d8
V2 Distribution List Digest sha256:0e06d651fbeacf85642365c9a04d1fd742cb9e08f13af3c334357f896f247da4
V2 Distribution Digest sha256:4cd2c45cdd442e0940317484ec3e866f84f7af905415308150d894974e1db792
V1 Distribution Digest sha256:b80be39cf3b0056baeb1caed88551f174863942c03182a9ec353fc1d43aa299e
V1 OCI Digest sha256:890f768d95363c52b7d75eaecafaaef5e7788749565d23eabb857a864e9032b1
  extended metadata
Manifest Type V1 OCI
Architecture amd64
Config
Args Escaped
Cmd
serve /configs --cache-dir=/tmp/cache
Entrypoint
/bin/opm
Env
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/busybox | SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
Labels
'version' '1.5.0'
Labels
'summary' 'Catalog for the KurrentDB Operator.'
Labels
'vendor' 'Kurrent, Inc'
Labels
'description' 'Catalog for the KurrentDB Operator.'
Labels
'maintainer' 'Kurrent, Inc'
Labels
'name' 'kurrentdb-operator'
Labels
'operators.operatorframework.io.index.configs.v1' '/configs'
Labels
'release' '4a061eca'
User
1001
Working Dir
/
Created 2025-12-23 19:19:10 UTC
Os linux

This package was uploaded with the following V1 OCI manifest: 

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.manifest.v1+json",
  "config": {
    "mediaType": "application/vnd.oci.image.config.v1+json",
    "digest": "sha256:8407a6016f6e01558ea13746b5749cf2a51f7a7ca1c4132dcfcaa55d57da5ded",
    "size": 3956
  },
  "layers": [
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:259db2ee6b876afac49b298219529e5ff850e8efb940856f8397c17d1bab100e",
      "size": 84719
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:2e4cf50eeb92ac3a7afe75e15d96a26dee99449f86b46c75b5d95f4418a5bca0",
      "size": 12579
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:56ce5a7a0a8cc3aded9e8cab00fd85f0a1c50376aa9f2318c4e66beb03eadf8f",
      "size": 458603
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:e1089d61b200106053b1717881bf0c1c47551478f01569d9224d33cccf3e4692",
      "size": 28389
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:0f8b424aa0b96c1c388a5fd4d90735604459256336853082afb61733438872b5",
      "size": 75
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:d557676654e572af3e3173c90e7874644207fda32cd87e9d3d66b5d7b98a7b21",
      "size": 193
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:d82bc7a76a838c9a4a6025192429c2fed58f73742ef1fb9c8bb7b995fc3b7213",
      "size": 130
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:d858cbc252ade14879807ff8dbc3043a26bbdb92087da98cda831ee040b172b3",
      "size": 173
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:1069fc2daed1aceff7232f4b8ab21200dd3d8b04f61be9da86977a34a105dfdc",
      "size": 97
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:b40161cd83fc5d470d6abe50e87aa288481b6b89137012881d74187cfbf9f502",
      "size": 382
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:3f4e2c5863480125882d92060440a5250766bce764fee10acdbac18c872e4dc7",
      "size": 326
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:eb8f5749650bdfb1514d83ae891881b02857c47b3b9a1cd5d50b647aeadc6376",
      "size": 130892
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:c99c3e266f21483c1a070b93d96a3276129b305af734ee4913acceff13e87855",
      "size": 766058
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:0241ab92283835c44458719d7eac0220e8d822a564db2f4bb3e100ed99082c90",
      "size": 4963856
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:89c8987965d93441bc86f705f14dc3e2c47b8a8b9f46324705515c968c02ccd7",
      "size": 159
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:8c0a3e028cd7a4b29c5ae24457de837e41a82df6ab67b07b4ef851e2f365b57d",
      "size": 23046029
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:c34c81acb9862fa7f2e2c57219caa40ef443b7dda1f127523f498d046f1e0ccf",
      "size": 98682
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:306b3c15706d966379ba32b625c8806385c035e080480628191ac5854edbffec",
      "size": 57087
    }
  ]
}
Digest: sha256:259db2ee6b876afac49b298219529e5ff850e8efb940856f8397c17d1bab100e
Command: /bin/sh NOP
 82.7 KB
Digest: sha256:2e4cf50eeb92ac3a7afe75e15d96a26dee99449f86b46c75b5d95f4418a5bca0
Command: /bin/sh NOP
 12.3 KB
Digest: sha256:56ce5a7a0a8cc3aded9e8cab00fd85f0a1c50376aa9f2318c4e66beb03eadf8f
Command: /bin/sh NOP
 447.9 KB
Digest: sha256:e1089d61b200106053b1717881bf0c1c47551478f01569d9224d33cccf3e4692
Command: /bin/sh NOP
 27.7 KB
Digest: sha256:0f8b424aa0b96c1c388a5fd4d90735604459256336853082afb61733438872b5
Command: /bin/sh NOP
 75 bytes
Digest: sha256:d557676654e572af3e3173c90e7874644207fda32cd87e9d3d66b5d7b98a7b21
Command: /bin/sh NOP
 193 bytes
Digest: sha256:d82bc7a76a838c9a4a6025192429c2fed58f73742ef1fb9c8bb7b995fc3b7213
Command: /bin/sh NOP
 130 bytes
Digest: sha256:d858cbc252ade14879807ff8dbc3043a26bbdb92087da98cda831ee040b172b3
Command: /bin/sh NOP
 173 bytes
Digest: sha256:1069fc2daed1aceff7232f4b8ab21200dd3d8b04f61be9da86977a34a105dfdc
Command: /bin/sh NOP
 97 bytes
Digest: sha256:b40161cd83fc5d470d6abe50e87aa288481b6b89137012881d74187cfbf9f502
Command: /bin/sh NOP
 382 bytes
Digest: sha256:3f4e2c5863480125882d92060440a5250766bce764fee10acdbac18c872e4dc7
Command: /bin/sh NOP
 326 bytes
Digest: sha256:eb8f5749650bdfb1514d83ae891881b02857c47b3b9a1cd5d50b647aeadc6376
Command: /bin/sh NOP
 127.8 KB
Digest: sha256:c99c3e266f21483c1a070b93d96a3276129b305af734ee4913acceff13e87855
Command: /bin/sh NOP
 748.1 KB
Digest: sha256:0241ab92283835c44458719d7eac0220e8d822a564db2f4bb3e100ed99082c90
Command: COPY /ko-app/grpc-health-probe /bin/grpc_health_probe # buildkit
 4.7 MB
Digest: sha256:89c8987965d93441bc86f705f14dc3e2c47b8a8b9f46324705515c968c02ccd7
Command: COPY nsswitch.conf /etc/nsswitch.conf # buildkit
 159 bytes
Digest: sha256:8c0a3e028cd7a4b29c5ae24457de837e41a82df6ab67b07b4ef851e2f365b57d
Command: COPY opm /bin/opm # buildkit
 22.0 MB
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: USER 1001
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: ENTRYPOINT ["/bin/opm"]
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: ENTRYPOINT ["/bin/opm"]
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: CMD ["serve" "/configs" "--cache-dir=/tmp/cache"]
 32 bytes
Digest: sha256:c34c81acb9862fa7f2e2c57219caa40ef443b7dda1f127523f498d046f1e0ccf
Command: COPY /configs /configs # buildkit
 96.4 KB
Digest: sha256:306b3c15706d966379ba32b625c8806385c035e080480628191ac5854edbffec
Command: COPY /tmp/cache /tmp/cache # buildkit
 55.7 KB
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: LABEL operators.operatorframework.io.index.configs.v1=/configs
 32 bytes

Last scanned

8 months, 3 weeks ago

Scan result

Vulnerable

Vulnerability count

15

Max. severity

High
Target: bin/grpc_health_probe
HIGH

CVE-2025-61729: crypto/x509: Excessive resource consumption when printing error string for host certificate validation in crypto/x509

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

Package Name: stdlib
Installed Version: v1.24.8
Fixed Version: 1.24.11, 1.25.5

References: access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-58187: crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

Package Name: stdlib
Installed Version: v1.24.8
Fixed Version: 1.24.9, 1.25.3

References: www.openwall.com access.redhat.com github.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-61727: golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.

Package Name: stdlib
Installed Version: v1.24.8
Fixed Version: 1.24.11, 1.25.5

References: access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
Target: bin/opm
HIGH

CVE-2025-66506: github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token

Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Prior to 1.8.3, function identity.extractIssuerURL splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request with an (invalid) OIDC identity token in the payload containing many period characters, a call to extractIssuerURL incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This vulnerability is fixed in 1.8.3.

Package Name: github.com/sigstore/fulcio
Installed Version: v1.7.1
Fixed Version: 1.8.3

References: access.redhat.com github.com github.com github.com nvd.nist.gov www.cve.org
HIGH

CVE-2025-58183: golang: archive/tar: Unbounded allocation when parsing GNU sparse map

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.8, 1.25.2

References: www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com cve.mitre.org errata.almalinux.org errata.rockylinux.org go.dev go.dev groups.google.com linux.oracle.com linux.oracle.com nvd.nist.gov pkg.go.dev www.cve.org
HIGH

CVE-2025-61729: crypto/x509: Excessive resource consumption when printing error string for host certificate validation in crypto/x509

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.11, 1.25.5

References: access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-47914: golang.org/x/crypto/ssh/agent: in golang.org/x/crypto/ssh/agent

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

Package Name: golang.org/x/crypto
Installed Version: v0.43.0
Fixed Version: 0.45.0

References: access.redhat.com go.dev go.dev go.googlesource.com groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-58181: golang.org/x/crypto/ssh: in golang.org/x/crypto/ssh

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

Package Name: golang.org/x/crypto
Installed Version: v0.43.0
Fixed Version: 0.45.0

References: access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-47912: net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.8, 1.25.2

References: www.openwall.com access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-58185: encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.8, 1.25.2

References: www.openwall.com access.redhat.com github.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-58186: golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.8, 1.25.2

References: www.openwall.com access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-58187: crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.9, 1.25.3

References: www.openwall.com access.redhat.com github.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-58188: crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.8, 1.25.2

References: www.openwall.com access.redhat.com github.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-58189: crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.8, 1.25.2

References: www.openwall.com access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-61723: encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.8, 1.25.2

References: www.openwall.com access.redhat.com github.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-61724: net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.8, 1.25.2

References: www.openwall.com access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-61725: net/mail: Excessive CPU consumption in ParseAddress in net/mail

The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.8, 1.25.2

References: www.openwall.com access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org
MEDIUM

CVE-2025-61727: golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.

Package Name: stdlib
Installed Version: v1.24.6
Fixed Version: 1.24.11, 1.25.5

References: access.redhat.com go.dev go.dev groups.google.com nvd.nist.gov pkg.go.dev www.cve.org

These instructions assume you have setup the repository first (or read it).

To pull kurrentdb-operator-catalog @ reference/tag sha256:890f768d95363c52b7d75eaecafaaef5e7788749565d23eabb857a864e9032b1: 

docker pull docker.eventstore.com/kurrent-latest/kurrentdb-operator-catalog@sha256:890f768d95363c52b7d75eaecafaaef5e7788749565d23eabb857a864e9032b1

You can also pull the latest version of this image (if it exists): 

docker pull docker.eventstore.com/kurrent-latest/kurrentdb-operator-catalog:latest

To refer to this image after pulling in a Dockerfile, specify the following: 

FROM docker.eventstore.com/kurrent-latest/kurrentdb-operator-catalog@sha256:890f768d95363c52b7d75eaecafaaef5e7788749565d23eabb857a864e9032b1
Still stuck? Need help? Don't panic. Just contact us for help (even if you're not a customer).
Previous Version: 1.6.0
Next Version: fc1afa1e2f056238e5d…
Top