GO-2022-0649 Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker...

GO-2022-0752 Privilege Escalation in Docker in github.com/docker/docker

Privilege Escalation in Docker in github.com/docker/docker...

GO-2022-0640 Arbitrary Code Execution in github.com/docker/docker

Arbitrary Code Execution in github.com/docker/docker...

GO-2022-0578 Incorrect Privilege Assignment in HashiCorp Vault in github.com/hashicorp/vault

Incorrect Privilege Assignment in HashiCorp Vault in github.com/hashicorp/vault...

GO-2022-0510 KubeEdge CloudCore Router memory exhaustion vulnerability in github.com/kubeedge/kubeedge

KubeEdge CloudCore Router memory exhaustion vulnerability in github.com/kubeedge/kubeedge...

GO-2022-0566 SSRF in repository migration in gogs.io/gogs

SSRF in repository migration in gogs.io/gogs...

GO-2022-0483 Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs...

GO-2022-0424 On Windows, `git-sizer` might run a `git` executable within the repository being analyzed in github.com/github/git-sizer

On Windows, git-sizer might run a git executable within the repository being analyzed in github.com/github/git-sizer...

GO-2022-0413 Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium...

GO-2022-0387 Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd...

GO-2022-0405 Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

Potential privilege escalation on Kubernetes = v1.19 when the Argo Sever is run with --auth-mode=client in github.com/argoproj/argo-workflows...

GO-2022-0377 SSRF in repository migration in gogs.io/gogs

SSRF in repository migration in gogs.io/gogs...

GO-2022-0348 Account compromise in Evmos in github.com/tharsis/evmos

Account compromise in Evmos in github.com/tharsis/evmos...

GO-2022-0307 Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server

Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server...

GO-2022-0302 SQL injection in github.com/navidrome/navidrome

SQL injection in github.com/navidrome/navidrome...

GO-2023-2398 lakeFS logs S3 credentials in plain text in github.com/treeverse/lakefs

lakeFS logs S3 credentials in plain text in github.com/treeverse/lakefs...

GO-2023-2337 Denial of service from malicious image manifest in kyverno in github.com/kyverno/kyverno

Denial of service from malicious image manifest in kyverno in github.com/kyverno/kyverno...

GO-2023-2135 Artifact Hub has Incorrect Docker Hub registry check in github.com/artifacthub/hub

Artifact Hub has Incorrect Docker Hub registry check in github.com/artifacthub/hub...

GO-2023-2080 Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium...

GO-2023-2012 lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files in github.com/treeverse/lakefs

lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files in github.com/treeverse/lakefs...