github.com/cloudflare/cfrpki vulnerabilities
CVEs whose affected-version data names the github.com/cloudflare/cfrpki package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
7 CVEsRSS
CVE-2022-3616Medium· 5.4OctoRPKI crashes when max iterations is reached
OctoRPKI crashes when max iterations is reached
▾ Sunlitcloudflare · github.com/cloudflare/cfrpkiEPSS 0.43%via OSV
CVE-2021-3911Medium· 4.2Misconfigured IP address field in ROA leads to OctoRPKI crash
Misconfigured IP address field in ROA leads to OctoRPKI crash
▾ Sunlitcloudflare · github.com/cloudflare/cfrpkiEPSS 0.91%via OSV
CVE-2021-3912Medium· 4.2OctoRPKI crashes when processing GZIP bomb returned via malicious repository
OctoRPKI crashes when processing GZIP bomb returned via malicious repository
▾ Sunlitcloudflare · github.com/cloudflare/cfrpkiEPSS 0.85%via OSV
CVE-2021-3908Medium· 5.9Infinite certificate chain depth results in OctoRPKI running forever
Infinite certificate chain depth results in OctoRPKI running forever
▾ Sunlitcloudflare · github.com/cloudflare/cfrpkiEPSS 0.73%via OSV
CVE-2021-3909Medium· 4.4Infinite open connection causes OctoRPKI to hang forever
Infinite open connection causes OctoRPKI to hang forever
▾ Sunlitcloudflare · github.com/cloudflare/cfrpkiEPSS 1.6%via OSV
CVE-2021-3910High· 7.5NUL character in ROA causes OctoRPKI to crash
NUL character in ROA causes OctoRPKI to crash
▾ Twilightcloudflare · github.com/cloudflare/cfrpkiEPSS 1.3%via OSV
CVE-2021-3761High· 7.5OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values
OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values
▾ Twilightcloudflare · github.com/cloudflare/cfrpkiEPSS 1.2%via OSV