PT-2023-33077 · Ibc-Go · Ibc-Go

Name of the Vulnerable Software and Affected Versions: ibc-go module affected versions not specified Description: The issue is related to the Inter-Blockchain Communication IBC protocol, specifically the "Huckleberry" vulnerability. Recommendations: At the moment, there is no information about a...

Google Protobuf Go Module Installed (macOS)

Binary data macosgoogleprotobufgomoduleinstalled.nbin...

Design/Logic Flaw

Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can either intentionally or inadvertently create a shard containing / characters from VTAdmin such that from that point on, anyone who tries to create a new shard fr...

Google Protobuf Go Module 1.29 < 1.29.1 DoS

The version of Google Protobuf module for Go is affected by a denial of service DoS vulnerability. Parsing invalid messages with a minus sign or whitespace can lead to a denial of service. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Google Protobuf Go Module Installed (Linux/UNIX)

Binary data googleprotobufgomodulelinuxinstalled.nbin...

FreeBSD : traefik -- Use of vulnerable Go module x/net/http2 (428922c9-b07e-11ed-8700-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 428922c9-b07e-11ed-8700-5404a68ad561 advisory. - A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the bo...

SUSE CVE-2021-21272

ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before version 0.9.0, there is a "zip-slip" vulnerability. The directory support feature allows the downloade...

CVE-2022-39213

go-cvss is a Go module to manipulate Common Vulnerability Scoring System CVSS. In affected versions when a full CVSS v2.0 vector string is parsed using ParseVector, an Out-of-Bounds Read is possible due to a lack of tests. The Go module will then panic. The problem is patched in tag v0.4.0, by th...

CVE-2022-39213 Out-of-bounds Read in go-cvss

go-cvss is a Go module to manipulate Common Vulnerability Scoring System CVSS. In affected versions when a full CVSS v2.0 vector string is parsed using ParseVector, an Out-of-Bounds Read is possible due to a lack of tests. The Go module will then panic. The problem is patched in tag v0.4.0, by th...

CVE-2022-39213

CVE-2022-39213 affects the Go module go-cvss . In affected versions, parsing a full CVSS v2.0 vector with the function ParseVector can trigger an Out-of-Bounds Read, resulting in a panic. The issue is fixed in tag v0.4.0 (commit d9d478ff0c13b8b09ace030db9262f3c2fe031f4); upgrading to that release...

Fedora: Security Advisory for golang-x-mod (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-tklauser-numcpus (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: golang-github-liamg-tml-0.3.0-4.fc35

A Go module and standalone binary to make the output of colored/formatted text in the terminal easier and more readable...

[SECURITY] Fedora 36 Update: golang-x-mod-0.6.0~dev-3.20220330git9b9b3d8.fc36

This packages holds packages for writing tools that work directly with Go mod ule mechanics. That is, it is for direct manipulation of Go modules themselves...

[SECURITY] Fedora 36 Update: golang-github-cli-gh-0.0.3-1.20220614git9dbbfe2.fc36

A Go module for interacting with gh and the GitHub API from the command line...

CVE-2021-21272

ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before version 0.9.0, there is a "zip-slip" vulnerability. The directory support feature allows the downloade...