GO-2026-5667 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, k8sgateway...

GO-2024-3134 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2022-0368 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2024-3130 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2026-4969 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, k8sgateway...

GO-2026-5164 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, k8sgateway...

GO-2026-5583 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, k8sgateway...

GO-2026-4808 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2026-5417 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, k8sgateway...

GO-2026-4806 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2026-4630 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, k8sgateway...

GO-2025-3743 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache...

GO-2024-2530 vulnerabilities

Vulnerabilities for packages: juicefs, dgraph...

GO-2026-5736 vulnerabilities

Vulnerabilities for packages: juicefs, dapr...

GO-2025-3942 vulnerabilities

Vulnerabilities for packages: k8sgateway, juicefs, kubernetes-dns-node-cache, cloudflared...

GO-2024-2785 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, cloudflared...

CVE-2026-59092

JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux. Attackers can request the...

CVE-2026-59092

JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux. Attackers can request the...

CVE-2026-59092

JuiceFS versions before 1.3.2 are vulnerable to authentication bypass via improper registration on http.DefaultServeMux, exposing /debug/pprof/cmdline and leaking database credentials and metadata engine connection strings. Profiling handlers also enable denial of service. Upgrade to 1.3.2 or lat...

CVE-2026-59092 JuiceFS - Authentication Bypass via pprof and metrics Endpoints

JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux. Attackers can request the...