4632 matches found
GO-2022-0377 SSRF in repository migration in gogs.io/gogs
SSRF in repository migration in gogs.io/gogs...
GO-2022-0367 Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme in github.com/keep-network/keep-ecdsa
Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme in github.com/keep-network/keep-ecdsa...
GO-2024-2588 Mattermost race condition in github.com/mattermost/mattermost-server
Mattermost race condition in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest...
GO-2026-6612 Double flow control refund on HTTP/2 server streams in net/http
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
GO-2026-6491 RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go...
GO-2026-4803 MinIO LDAP login brute-force via user enumeration and missing rate limit in github.com/minio/minio
MinIO LDAP login brute-force via user enumeration and missing rate limit in github.com/minio/minio...
GO-2025-4225 Gogs vulnerable to a bypass of CVE-2024-55947 in gogs.io/gogs
Gogs vulnerable to a bypass of CVE-2024-55947 in gogs.io/gogs...
GO-2025-4017 Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go...
GO-2025-4043 NeuVector is shipping cryptographic material into its binary in github.com/neuvector/neuvector
NeuVector is shipping cryptographic material into its binary in github.com/neuvector/neuvector. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerabilit...
GO-2025-3892 HashiCorp go-getter Vulnerable to Symlink Attacks in github.com/hashicorp/go-getter
HashiCorp go-getter Vulnerable to Symlink Attacks in github.com/hashicorp/go-getter...
GO-2025-3897 CRI-O has Potential High Memory Consumption from File Read in github.com/cri-o/cri-o
CRI-O has Potential High Memory Consumption from File Read in github.com/cri-o/cri-o...
GO-2025-3842 Hashicorp Vault has Login MFA Rate Limit Bypass Vulnerability in github.com/hashicorp/vault
Hashicorp Vault has Login MFA Rate Limit Bypass Vulnerability in github.com/hashicorp/vault...
GO-2025-3824 Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama
Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama...
GO-2025-3816 apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko
apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko...
GO-2025-3790 File Browser's password protection of links is bypassable in github.com/filebrowser/filebrowser
File Browser's password protection of links is bypassable in github.com/filebrowser/filebrowser...
GO-2025-3507 Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux
Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux...
GO-2022-0473 Cross site scripting via cookies in gogs in gogs.io/gogs
Cross site scripting via cookies in gogs in gogs.io/gogs...
GO-2022-0407 Listing of upload directory contents possible in github.com/ThomasLeister/prosody-filer
Listing of upload directory contents possible in github.com/ThomasLeister/prosody-filer...
GO-2026-6186 Path traversal via local backend encoding in github.com/rclone/rclone
Path traversal via local backend encoding in github.com/rclone/rclone...
GO-2025-3961 Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman
Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman...
GO-2025-3935 podman kube play symlink traversal vulnerability in github.com/containers/podman
podman kube play symlink traversal vulnerability in github.com/containers/podman...
GO-2025-3765 SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver
SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver...
GO-2025-3619 Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server
Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...
GO-2026-6265 Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison in github.com/coder/coder
Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison in github.com/coder/coder...
GO-2026-4528 Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo...
GO-2025-3895 HydrAIDE Authentication Bypass Vulnerability in github.com/hydraide/hydraide
HydrAIDE Authentication Bypass Vulnerability in github.com/hydraide/hydraide. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...
GO-2025-3886 OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin
OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin...
GO-2025-3793 File Browser: Command Execution not Limited to Scope in github.com/filebrowser/filebrowser
File Browser: Command Execution not Limited to Scope in github.com/filebrowser/filebrowser...
GO-2025-4019 Parallax is vulnerable to DoS via malicious p2p message in github.com/microstack-tech/parallax
Parallax is vulnerable to DoS via malicious p2p message in github.com/microstack-tech/parallax...
GO-2025-3623 Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server
Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...
GO-2025-4153 Grafana Incorrect Privilege Assignment vulnerability in github.com/grafana/grafana
Grafana Incorrect Privilege Assignment vulnerability in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners,...