Security Vulnerabilities - v14.1.0-release-prod

[syzzo]

✗ Medium severity vulnerability found in golang.org/x/sys/unix
Description: Incorrect Privilege Assignment
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXSYSUNIX-3310442
Introduced through: golang.org/x/sys/[email protected]
From: golang.org/x/sys/[email protected]
Fixed in: 0.1.0

✗ Medium severity vulnerability found in golang.org/x/net/http2
Description: Denial of Service (DoS)
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXNETHTTP2-3160322
Introduced through: golang.org/x/net/[email protected]
From: golang.org/x/net/[email protected]
Fixed in: 0.4.0

✗ Medium severity vulnerability found in golang.org/x/net/http/httpguts
Description: Denial of Service (DoS)
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXNETHTTPHTTPGUTS-3314986
Introduced through: golang.org/x/net/http/[email protected]
From: golang.org/x/net/http/[email protected]
Fixed in: 0.0.0-20210428140749-89ef3d95e781

✗ High severity vulnerability found in gopkg.in/yaml.v3
Description: Denial of Service (DoS)
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GOPKGINYAMLV3-2841557
Introduced through: gopkg.in/[email protected]
From: gopkg.in/[email protected]
Fixed in: 3.0.0

✗ High severity vulnerability found in gopkg.in/yaml.v3
Description: NULL Pointer Dereference
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GOPKGINYAMLV3-2952714
Introduced through: gopkg.in/[email protected]
From: gopkg.in/[email protected]
Fixed in: 3.0.1

✗ High severity vulnerability found in golang.org/x/net/http2/hpack
Description: Denial of Service (DoS)
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXNETHTTP2HPACK-3358253
Introduced through: golang.org/x/net/http2/[email protected]
From: golang.org/x/net/http2/[email protected]
Fixed in: 0.7.0

✗ High severity vulnerability found in golang.org/x/net/http2
Description: Denial of Service (DoS)
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXNETHTTP2-2313688
Introduced through: golang.org/x/net/[email protected]
From: golang.org/x/net/[email protected]
Fixed in: 0.0.0-20211209124913-491a49abca63

✗ High severity vulnerability found in golang.org/x/net/http2
Description: Denial of Service
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXNETHTTP2-3028257
Introduced through: golang.org/x/net/[email protected]
From: golang.org/x/net/[email protected]
Fixed in: 0.0.0-20220906165146-f3363e06e74c, 1.18.6, 1.19.1

✗ High severity vulnerability found in golang.org/x/net/http2
Description: Denial of Service (DoS)
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXNETHTTP2-3323837
Introduced through: golang.org/x/net/[email protected]
From: golang.org/x/net/[email protected]
Fixed in: 0.7.0