added
v2.5.1-stable Release
19 days ago by Dyah
Version 2.5.1 of Sidecar includes updates on Go cryptography packages, protobuf, and x/net dependencies to address newly identified security issues.
Fixed
| CVE ID | Component | Severity | Description |
|---|---|---|---|
| CVE-2025-22869 | x/crypto | High | SSH server DoS via slow key exchange. |
| CVE-2024-24786 | protobuf | High | Infinite loop DoS via malformed JSON. |
| CVE-2025-22872 | x/net | Medium | HTML parser XSS via misread self-closing tags. |
| CVE-2025-47911 | x/net | Medium | HTML parser DoS via crafted input. |