Open
Description
go-sqlcmd v1.8.2
Trivy scan reports Vulnerability CVE-2024-45338 in Package "golang.org/x/net" v0.26.0, this is fixed in version 0.33.0
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
Metadata
Metadata
Assignees
Labels
No labels