Advisories for Golang/Github.com/Rancher/Wrangler package

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in github.com/rancher/wrangler.

Impact A denial of services (DoS) vulnerability was discovered in Wrangler Git package affecting versions up to and including v1.0.0. Specially crafted Git credentials can result in a denial of service (DoS) attack on an application that uses Wrangler due to the exhaustion of the available memory and CPU resources. This is caused by a lack of input validation of Git credentials before they are used, which may lead to …