3744 matches found
GO-2023-1888 1Panel vulnerable to command injection when entering the container terminal in github.com/1Panel-dev/1Panel
1Panel vulnerable to command injection when entering the container terminal in github.com/1Panel-dev/1Panel...
GO-2023-1897 HashiCorp Vault's revocation list not respected in github.com/hashicorp/vault
HashiCorp Vault's revocation list not respected in github.com/hashicorp/vault...
GO-2023-1896 Zinc Cross-site Scripting vulnerability in github.com/zinclabs/zinc
Zinc Cross-site Scripting vulnerability in github.com/zinclabs/zinc...
GO-2023-1862 Cilium vulnerable to information leakage via incorrect ReferenceGrant handling in github.com/cilium/cilium
Cilium vulnerable to information leakage via incorrect ReferenceGrant handling in github.com/cilium/cilium...
GO-2023-1900 Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy Operation in github.com/hashicorp/vault
Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy Operation in github.com/hashicorp/vault...
GO-2023-1892 Kubernetes mountable secrets policy bypass in k8s.io/kubernetes
Kubernetes mountable secrets policy bypass in k8s.io/kubernetes...
GO-2023-1891 Vulnerable to policy bypass in kube-apiserver in k8s.io/kubernetes
Vulnerable to policy bypass in kube-apiserver in k8s.io/kubernetes...
GO-2023-1899 Hashicorp Nomad ACLs Cannot Deny Access to Workload’s Own Variables in github.com/hashicorp/nomad
Hashicorp Nomad ACLs Cannot Deny Access to Workload’s Own Variables in github.com/hashicorp/nomad...
GO-2023-1895 Zinc Cross-site Scripting vulnerability in github.com/zinclabs/zinc
Zinc Cross-site Scripting vulnerability in github.com/zinclabs/zinc...
GO-2023-1879 Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource in go.temporal.io/server
Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource in go.temporal.io/server...
GO-2023-1800 Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium
Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium...
GO-2023-1852 HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul
HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul...
GO-2023-1803 In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima
In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima...
GO-2023-1806 mx-chain-go does not treat invalid transaction with wrong username correctly in github.com/multiversx/mx-chain-go
mx-chain-go does not treat invalid transaction with wrong username correctly in github.com/multiversx/mx-chain-go...
GO-2023-1808 Go package pydio/cells vulnerable to authorization bypass in github.com/pydio/cells
Go package pydio/cells vulnerable to authorization bypass in github.com/pydio/cells...
GO-2023-1829 Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation
Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation...
GO-2023-1804 Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno
Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno...
GO-2023-1828 Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul
Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul...
GO-2023-1853 HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul
HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul...
GO-2023-1819 Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno
Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno...
GO-2023-1801 kyverno seccomp control can be circumvented in github.com/kyverno/kyverno
kyverno seccomp control can be circumvented in github.com/kyverno/kyverno...
GO-2023-1795 malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor...
GO-2023-1850 HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul
HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul...
GO-2023-1831 Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation
Notation's default maxSignatureAttempts in notation verify enables an endless data attack in github.com/notaryproject/notation...
GO-2023-1849 Hashicorp Vault vulnerable to Cross-site Scripting in github.com/hashicorp/vault
Hashicorp Vault vulnerable to Cross-site Scripting in github.com/hashicorp/vault...
GO-2023-1827 Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul...
GO-2023-1785 Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium
Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium...
GO-2023-1793 secrets-store-csi-driver discloses service account tokens in logs in sigs.k8s.io/secrets-store-csi-driver
secrets-store-csi-driver discloses service account tokens in logs in sigs.k8s.io/secrets-store-csi-driver...
GO-2023-1707 HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation in github.com/hashicorp/nomad
HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation in github.com/hashicorp/nomad...
GO-2023-1774 Answer Missing Authorization vulnerability in github.com/answerdev/answer
Answer Missing Authorization vulnerability in github.com/answerdev/answer...
GO-2023-1716 Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer
Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer...
GO-2023-1761 imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy
imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy...
GO-2023-1721 OpenFeature Operator vulnerable to Cluster-level Privilege Escalation in github.com/open-feature/open-feature-operator
OpenFeature Operator vulnerable to Cluster-level Privilege Escalation in github.com/open-feature/open-feature-operator...
GO-2023-1708 HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault
HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault...
GO-2023-1747 Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper
Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper...
GO-2023-1719 Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer
Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer...
GO-2023-1768 Wings vulnerable to escape to host from installation container in github.com/pterodactyl/wings
Wings vulnerable to escape to host from installation container in github.com/pterodactyl/wings...
GO-2023-1763 On a compromised node, the fluid-csi service account can be used to modify node specs in github.com/fluid-cloudnative/fluid
On a compromised node, the fluid-csi service account can be used to modify node specs in github.com/fluid-cloudnative/fluid...
GO-2023-1730 Debug mode leaks confidential data in Cilium in github.com/cilium/cilium
Debug mode leaks confidential data in Cilium in github.com/cilium/cilium...
GO-2023-1738 Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer in github.com/apptainer/apptainer
Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer in github.com/apptainer/apptainer...
GO-2023-1700 Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker
Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker...
GO-2023-1754 Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor...
GO-2023-1654 Answer has Observable Response Discrepancy in github.com/answerdev/answer
Answer has Observable Response Discrepancy in github.com/answerdev/answer...
GO-2023-1656 Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1659 Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer
Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer...
GO-2023-1655 Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer
Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer...
GO-2023-1652 cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared
cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared...
GO-2023-1658 Answer vulnerable to Business Logic Errors in github.com/answerdev/answer
Answer vulnerable to Business Logic Errors in github.com/answerdev/answer...
GO-2023-1670 Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd
Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd...