270 matches found
CVE-2025-47909
The CVE-2025-47909 entry describes a CSRF vulnerability in gorilla/csrf related to how TrustedOrigins can permit both HTTP and HTTPS origins. Affected component: gorilla/csrf (Go web middleware). Root cause: Origin/Trust logic allows a host listed in TrustedOrigins to bypass same-origin checks, e...
PT-2025-35244
Name of the Vulnerable Software and Affected Versions: Go affected versions not specified Description: Hosts listed in TrustedOrigins implicitly allow requests from the corresponding HTTP origins, potentially enabling network attackers to perform Cross-Site Request Forgery CSRF attacks. Following...
Linux Distros Unpatched Vulnerability : CVE-2025-24358
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gorilla/csrf provides Cross Site Request Forgery CSRF prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate t...
Linux Distros Unpatched Vulnerability : CVE-2023-48704
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issu...
Security Bulletin: IBM CloudPak for Data Scheduling Service is vulernable to CVE-2025-24358
Summary github.com/gorilla/csrf-v1.7.1 is used by the Scheduling Service. Vulnerability Details CVEID:CVE-2025-24358 DESCRIPTION: gorilla/csrf provides Cross Site Request Forgery CSRF prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate the Orig...
Malicious code in victor-gorilla-fg7x (npm)
The package victor-gorilla-fg7x was found to contain malicious code...
Malicious code in gorilla-foxtrot-yqcj (npm)
The package gorilla-foxtrot-yqcj was found to contain malicious code...
MAL-2025-22893 Malicious code in iceberg-gorilla-igfp (npm)
The package iceberg-gorilla-igfp was found to contain malicious code...
Malicious code in quail-gorilla-lme677-project (npm)
The package quail-gorilla-lme677-project was found to contain malicious code...
Malicious code in prairie-gorilla-xzt593-project (npm)
The package prairie-gorilla-xzt593-project was found to contain malicious code...
Malicious code in violet-gorilla-wdn829-project (npm)
The package violet-gorilla-wdn829-project was found to contain malicious code...
MAL-2025-21767 Malicious code in gorilla-strawberry-ylcg (npm)
The package gorilla-strawberry-ylcg was found to contain malicious code...
MAL-2025-21764 Malicious code in gorilla-harbor-uwo619-project (npm)
The package gorilla-harbor-uwo619-project was found to contain malicious code...
MAL-2025-22636 Malicious code in horizon-gorilla-zst235-project (npm)
The package horizon-gorilla-zst235-project was found to contain malicious code...
MAL-2025-24953 Malicious code in larch-gorilla-n0m6 (npm)
The package larch-gorilla-n0m6 was found to contain malicious code...
MAL-2025-21766 Malicious code in gorilla-redwood-tgom (npm)
The package gorilla-redwood-tgom was found to contain malicious code...
MAL-2025-21762 Malicious code in gorilla-fern-ohc952-project (npm)
The package gorilla-fern-ohc952-project was found to contain malicious code...
MAL-2025-31162 Malicious code in quasar-gorilla-dzj243-project (npm)
The package quasar-gorilla-dzj243-project was found to contain malicious code...