694 matches found
Cleartext Transmission Of Sensitive Information
github.com/go-acme/lego is vulnerable to Cleartext Transmission of Sensitive Information. The vulnerability is due to the library not enforcing HTTPS when communicating with Certificate Authorities CAs, which allows attackers to intercept ACME protocol operations and access sensitive details like...
Linux Distros Unpatched Vulnerability : CVE-2025-54799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library an...
Malicious code in acme-http-01-sequelize (npm)
The package acme-http-01-sequelize was found to contain malicious code...
Malicious code in acme-dns-01-dyndns (npm)
The package acme-dns-01-dyndns was found to contain malicious code...
Malicious code in acme-dns-01-freedns (npm)
The package acme-dns-01-freedns was found to contain malicious code...
Malicious code in acme-react-components (npm)
The package acme-react-components was found to contain malicious code...
Malicious code in acme-http-01-reddis (npm)
The package acme-http-01-reddis was found to contain malicious code...
MAL-2025-14010 Malicious code in acme-http-01-s3 (npm)
The package acme-http-01-s3 was found to contain malicious code...
Malicious code in acme-http-01-s3 (npm)
The package acme-http-01-s3 was found to contain malicious code...
MAL-2025-14009 Malicious code in acme-http-01-reddis (npm)
The package acme-http-01-reddis was found to contain malicious code...
MAL-2025-14008 Malicious code in acme-dns-01-lightsail (npm)
The package acme-dns-01-lightsail was found to contain malicious code...
MAL-2025-14006 Malicious code in acme-dns-01-dyndns (npm)
The package acme-dns-01-dyndns was found to contain malicious code...
MAL-2025-14007 Malicious code in acme-dns-01-freedns (npm)
The package acme-dns-01-freedns was found to contain malicious code...
MAL-2025-14012 Malicious code in acme-react-components (npm)
The package acme-react-components was found to contain malicious code...
Malicious code in acme-dns-01-lightsail (npm)
The package acme-dns-01-lightsail was found to contain malicious code...
MAL-2025-14011 Malicious code in acme-http-01-sequelize (npm)
The package acme-http-01-sequelize was found to contain malicious code...
GO-2025-3847 Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego
Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego...
CVE-2025-54799 vulnerabilities
Vulnerabilities for packages: sftpgo, terraform-provider-acme, traefik...
