Vulnerability Report

Search:

Name	Version	Type	Vulnerability	Severity	Description	State	Fixed In
busybox	1.37.0-r19	apk	CVE-2024-58251	Low	In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.		N/A
busybox	1.37.0-r19	apk	CVE-2025-46394	Low	In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.		N/A
busybox-binsh	1.37.0-r19	apk	CVE-2024-58251	Low	In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.		N/A
busybox-binsh	1.37.0-r19	apk	CVE-2025-46394	Low	In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.		N/A
commons-lang	2.6	java-archive	GHSA-j288-q9x7-2f5v	Medium	Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs	not-fixed	N/A
commons-lang	2.6	java-archive	GHSA-j288-q9x7-2f5v	Medium	Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs	not-fixed	N/A
commons-lang	2.6	java-archive	GHSA-j288-q9x7-2f5v	Medium	Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs	not-fixed	N/A
commons-lang	2.6	java-archive	GHSA-j288-q9x7-2f5v	Medium	Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs	not-fixed	N/A
commons-lang	2.6	java-archive	GHSA-j288-q9x7-2f5v	Medium	Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs	not-fixed	N/A
curl	8.14.1-r1	apk	CVE-2025-9086	High	1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or otherwise made to speak with `http://target` (same hostname, but using clear text HTTP) using the same cookie set 3. The same cookie name is set - but with just a slash as path (`path='/'`). Since this site is not secure, the cookie should just be ignored. 4. A bug in the path comparison logic makes curl read outside a heap buffer boundary The bug either causes a crash or it potentially makes the comparison come to the wrong conclusion and lets the clear-text site override the contents of the secure cookie, contrary to expectations and depending on the memory contents immediately following the single-byte allocation that holds the path. The presumed and correct behavior would be to plainly ignore the second set of the cookie since it was already set as secure on a secure host so overriding it on an insecure host should not be okay.	unknown	N/A

Showing 1 to 10 of 14 entries

Grype Report