Authentication Bypass

github.com/nanobox-io/golang-nanoauth is vulnerable to Authentication Bypass. The vulnerability exists due to an improper authentication mechanism in nanoauth.go which allows an attacker to bypass permission checks and gain access to the system when the ListenAndServe function is called with an...

Arbitrary Code Execution

replicator is vulnerable to untrusted data deserialization. The vulnerability exists in the fromSerializable function in TypedArray object which allows a remote attacker to run arbitrary code due to an improper deserialization mechanism...