GO-2022-0815 Improper input validation in umoci in github.com/opencontainers/umoci

Improper input validation in umoci in github.com/opencontainers/umoci...

GO-2022-0806 Use After Free in HashiCorp Nomad in github.com/hashicorp/nomad

Use After Free in HashiCorp Nomad in github.com/hashicorp/nomad...

GO-2022-0818 Missing Authorization in Harbor in github.com/goharbor/harbor

Missing Authorization in Harbor in github.com/goharbor/harbor...

GO-2022-0793 Path traversal in u-root in github.com/u-root/u-root

Path traversal in u-root in github.com/u-root/u-root...

GO-2022-0786 Authentication Bypass in hydra in github.com/ory/hydra

Authentication Bypass in hydra in github.com/ory/hydra...

GO-2022-0778 Information Disclosure in HashiCorp Vault in github.com/hashicorp/vault

Information Disclosure in HashiCorp Vault in github.com/hashicorp/vault...

GO-2022-0783 JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium...

GO-2022-0797 Insecure Permissions in Gogs in gogs.io/gogs

Insecure Permissions in Gogs in gogs.io/gogs...

GO-2022-0774 Improper Authentication in github.com/containous/traefik

Improper Authentication in github.com/containous/traefik...

GO-2022-0790 Subdomain checking of whitelisted domains could allow unintended redirects in oauth2-proxy in github.com/oauth2-proxy/oauth2-proxy

Subdomain checking of whitelisted domains could allow unintended redirects in oauth2-proxy in github.com/oauth2-proxy/oauth2-proxy...

GO-2022-0776 Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

Denial of Service DoS in HashiCorp Consul in github.com/hashicorp/consul...

GO-2022-0785 "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

"catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor...

GO-2022-0794 Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements in github.com/weaveworks/weave

Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements in github.com/weaveworks/weave...

GO-2022-0787 Symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations in dbdeployer in github.com/datacharmer/dbdeployer

Symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations in dbdeployer in github.com/datacharmer/dbdeployer...

GO-2022-0788 Insecure Permissions in Gogs in gogs.io/gogs

Insecure Permissions in Gogs in gogs.io/gogs...

GO-2022-0779 Path traversal in github.com/ipfs/go-ipfs

Path traversal in github.com/ipfs/go-ipfs...

GO-2022-0781 Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

Harbor is vulnerable to a limited Server-Side Request Forgery SSRF CVE-2020-13788 in github.com/goharbor/harbor...

GO-2022-0780 Improper Authentication in InfluxDB in github.com/influxdata/influxdb

Improper Authentication in InfluxDB in github.com/influxdata/influxdb...

GO-2022-0792 Privilege Escalation in Kubernetes in github.com/kubernetes/kubernetes

Privilege Escalation in Kubernetes in github.com/kubernetes/kubernetes...

GO-2022-0775 Erroneous Proof of Work calculation in geth in github.com/ethereum/go-ethereum

Erroneous Proof of Work calculation in geth in github.com/ethereum/go-ethereum...

GO-2022-0784 containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd...

GO-2022-0782 Symlink Attack in kubectl cp in k8s.io/kubernetes

Symlink Attack in kubectl cp in k8s.io/kubernetes...

GO-2022-0769 Incorrect Default Permissions in Binance tss-lib in github.com/binance-chain/tss-lib

Incorrect Default Permissions in Binance tss-lib in github.com/binance-chain/tss-lib...

GO-2022-0732 Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad

Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad...

GO-2022-0708 Arbitrary File Override in Docker Engine in github.com/docker/docker

Arbitrary File Override in Docker Engine in github.com/docker/docker...

GO-2022-0645 Access control flaw in Kiali in github.com/kiali/kiali

Access control flaw in Kiali in github.com/kiali/kiali...

GO-2022-0770 Path Traversal in HashiCorp Nomad in github.com/hashicorp/nomad

Path Traversal in HashiCorp Nomad in github.com/hashicorp/nomad...

GO-2022-0704 Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

Unauthenticated users can exploit an enumeration vulnerability in Harbor CVE-2019-19030 in github.com/goharbor/harbor...

GO-2022-0644 Access Control Bypass in github.com/rancher/rancher

Access Control Bypass in github.com/rancher/rancher...

GO-2022-0700 Kiali Authentication Bypass vulnerability in github.com/kiali/kiali

Kiali Authentication Bypass vulnerability in github.com/kiali/kiali...

GO-2022-0707 Grafana Authentication Bypass in github.com/grafana/grafana

Grafana Authentication Bypass in github.com/grafana/grafana...

GO-2022-0760 Ethermint vulnerable to DoS through unintended Contract Selfdestruct in github.com/crypto-org-chain/cronos

Ethermint vulnerable to DoS through unintended Contract Selfdestruct in github.com/crypto-org-chain/cronos...

GO-2022-0749 OS Command Injection in gogs in gogs.io/gogs

OS Command Injection in gogs in gogs.io/gogs...

GO-2022-0709 Improper network isolation in Hashicorp Nomad in github.com/hashicorp/nomad

Improper network isolation in Hashicorp Nomad in github.com/hashicorp/nomad...

GO-2022-0642 Cross-site Scripting in Gogs in gogs.io/gogs

Cross-site Scripting in Gogs in gogs.io/gogs...

GO-2022-0703 XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes...

GO-2022-0752 Privilege Escalation in Docker in github.com/docker/docker

Privilege Escalation in Docker in github.com/docker/docker...

GO-2022-0649 Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker

Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker...

GO-2022-0647 Arbitrary File Write in Libcontainer in github.com/docker/docker

Arbitrary File Write in Libcontainer in github.com/docker/docker...

GO-2022-0751 Path Traversal in Docker in github.com/docker/docker

Path Traversal in Docker in github.com/docker/docker...

GO-2022-0705 Directory Traversal in Docker in github.com/docker/docker

Directory Traversal in Docker in github.com/docker/docker...

GO-2022-0611 HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault

HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault...

GO-2022-0623 Invalid session token expiration in github.com/hashicorp/vault

Invalid session token expiration in github.com/hashicorp/vault...

GO-2022-0631 Hard coded cryptographic key in Kiali in github.com/kiali/kiali

Hard coded cryptographic key in Kiali in github.com/kiali/kiali...

GO-2022-0636 Man-in-the-Middle (MitM) in github.com/docker/docker

Man-in-the-Middle MitM in github.com/docker/docker...

GO-2022-0609 Gitea Missing Authorization vulnerability in code.gitea.io/gitea

Gitea Missing Authorization vulnerability in code.gitea.io/gitea...

GO-2022-0616 Improper Privilege Management in Mattermost in github.com/mattermost/mattermost-server

Improper Privilege Management in Mattermost in github.com/mattermost/mattermost-server...

GO-2022-0620 HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0 in github.com/hashicorp/vault

HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0 in github.com/hashicorp/vault...

GO-2022-0626 Insufficient Session Expiration in Kiali in github.com/kiali/kiali

Insufficient Session Expiration in Kiali in github.com/kiali/kiali...

GO-2022-0632 Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault in github.com/hashicorp/vault

Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault in github.com/hashicorp/vault...