GO-2022-0780 Improper Authentication in InfluxDB in github.com/influxdata/influxdb

Improper Authentication in InfluxDB in github.com/influxdata/influxdb...

GO-2022-0708 Arbitrary File Override in Docker Engine in github.com/docker/docker

Arbitrary File Override in Docker Engine in github.com/docker/docker...

GO-2022-0752 Privilege Escalation in Docker in github.com/docker/docker

Privilege Escalation in Docker in github.com/docker/docker...

GO-2022-0649 Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker...

GO-2022-0640 Arbitrary Code Execution in github.com/docker/docker

Arbitrary Code Execution in github.com/docker/docker...

GO-2022-0578 Incorrect Privilege Assignment in HashiCorp Vault in github.com/hashicorp/vault

Incorrect Privilege Assignment in HashiCorp Vault in github.com/hashicorp/vault...

GO-2022-0510 KubeEdge CloudCore Router memory exhaustion vulnerability in github.com/kubeedge/kubeedge

KubeEdge CloudCore Router memory exhaustion vulnerability in github.com/kubeedge/kubeedge...

GO-2022-0413 Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium...

GO-2022-0387 Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd

Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd...

GO-2022-0405 Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows

Potential privilege escalation on Kubernetes = v1.19 when the Argo Sever is run with --auth-mode=client in github.com/argoproj/argo-workflows...

GO-2022-0348 Account compromise in Evmos in github.com/tharsis/evmos

Account compromise in Evmos in github.com/tharsis/evmos...

GO-2022-0307 Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server

Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server...

GO-2023-2398 lakeFS logs S3 credentials in plain text in github.com/treeverse/lakefs

lakeFS logs S3 credentials in plain text in github.com/treeverse/lakefs...

GO-2023-2135 Artifact Hub has Incorrect Docker Hub registry check in github.com/artifacthub/hub

Artifact Hub has Incorrect Docker Hub registry check in github.com/artifacthub/hub...

GO-2023-2080 Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium...

GO-2023-2012 lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files in github.com/treeverse/lakefs

lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files in github.com/treeverse/lakefs...

GO-2023-2028 OpenFGA Authorization Bypass in github.com/openfga/openfga

OpenFGA Authorization Bypass in github.com/openfga/openfga...

GO-2023-2022 Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker

Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker...

GO-2023-1957 KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

KubePi may leak password hash of any user in github.com/KubeOperator/kubepi...

GO-2023-1850 HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul...