4046 matches found
GO-2022-0314 Cross-site Scripting in Gitea in github.com/go-gitea/gitea
Cross-site Scripting in Gitea in github.com/go-gitea/gitea...
GO-2022-0340 User login denial of service in github.com/google/fscrypt
User login denial of service in github.com/google/fscrypt...
GO-2022-0348 Account compromise in Evmos in github.com/tharsis/evmos
Account compromise in Evmos in github.com/tharsis/evmos...
GO-2022-0344 containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd
containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd...
GO-2022-0354 Code Injection in CRI-O in github.com/cri-o/cri-o
Code Injection in CRI-O in github.com/cri-o/cri-o...
GO-2022-0350 Code injection in Stripe CLI on windows in github.com/stripe/stripe-cli
Code injection in Stripe CLI on windows in github.com/stripe/stripe-cli...
GO-2022-0329 Improper Authentication in Capsule Proxy in github.com/clastix/capsule-proxy
Improper Authentication in Capsule Proxy in github.com/clastix/capsule-proxy...
GO-2022-0351 Arbitrary file write in nats-server in github.com/nats-io/nats-server
Arbitrary file write in nats-server in github.com/nats-io/nats-server...
GO-2022-0328 Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker...
GO-2022-0342 Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana
Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana...
GO-2022-0339 Possible filesystem space exhaustion by local users in github.com/google/fscrypt
Possible filesystem space exhaustion by local users in github.com/google/fscrypt...
GO-2022-0295 Lookup operations do not take into account wildcards in SpiceDB in github.com/authzed/spicedb
Lookup operations do not take into account wildcards in SpiceDB in github.com/authzed/spicedb...
GO-2022-0291 Unsafe inline XSS in pasting DOM element into chat in github.com/owncast/owncast
Unsafe inline XSS in pasting DOM element into chat in github.com/owncast/owncast...
GO-2022-0306 Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy
Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy...
GO-2022-0261 Authentication bypass issue in the Operator Console in github.com/minio/console
Authentication bypass issue in the Operator Console in github.com/minio/console...
GO-2022-0250 Infinite open connection causes OctoRPKI to hang forever in github.com/cloudflare/cfrpki
Infinite open connection causes OctoRPKI to hang forever in github.com/cloudflare/cfrpki...
GO-2022-0249 Infinite certificate chain depth results in OctoRPKI running forever in github.com/cloudflare/cfrpki
Infinite certificate chain depth results in OctoRPKI running forever in github.com/cloudflare/cfrpki...
GO-2022-0302 SQL injection in github.com/navidrome/navidrome
SQL injection in github.com/navidrome/navidrome...
GO-2022-0298 Command injection in gh-ost in github.com/github/gh-ost
Command injection in gh-ost in github.com/github/gh-ost...
GO-2022-0281 Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman
Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman...
GO-2022-0278 Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd
Unprivileged pod using hostPath can side-step active LSM when it is SELinux in github.com/containerd/containerd...
GO-2022-0310 Capture-replay in Gitea in code.gitea.io/gitea
Capture-replay in Gitea in code.gitea.io/gitea...
GO-2022-0308 Gitea displaying raw OpenID error in UI in github.com/go-gitea/gitea
Gitea displaying raw OpenID error in UI in github.com/go-gitea/gitea...
GO-2022-0260 Privilege escalation to cluster admin on multi-tenant environments in github.com/fluxcd/kustomize-controller
Privilege escalation to cluster admin on multi-tenant environments in github.com/fluxcd/kustomize-controller...
GO-2022-0231 Cross-site Scripting in github.com/schollz/rwtxt
Cross-site Scripting in github.com/schollz/rwtxt...
GO-2022-0305 Instance config inline secret exposure in Grafana in github.com/grafana/agent
Instance config inline secret exposure in Grafana in github.com/grafana/agent...
GO-2022-0307 Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server
Incorrect Authorization in NATS nats-server in github.com/nats-io/nats-server...
GO-2023-2355 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving
Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving...
GO-2023-2426 ewen-lbh/ffcss Late-Unicode normalization vulnerability in github.com/ewen-lbh/ffcss
ewen-lbh/ffcss Late-Unicode normalization vulnerability in github.com/ewen-lbh/ffcss...
GO-2023-2378 Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks
Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks...
GO-2023-2422 Deis Workflow Manager race condition vulnerability in github.com/deis/workflow-manager
Deis Workflow Manager race condition vulnerability in github.com/deis/workflow-manager...
GO-2023-2377 Traefik docker container using 100% CPU in github.com/traefik/traefik
Traefik docker container using 100% CPU in github.com/traefik/traefik...
GO-2023-2340 Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno
Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno...
GO-2023-2398 lakeFS logs S3 credentials in plain text in github.com/treeverse/lakefs
lakeFS logs S3 credentials in plain text in github.com/treeverse/lakefs...
GO-2023-2351 Capsule Proxy Authentication bypass using an empty token in github.com/projectcapsule/capsule-proxy
Capsule Proxy Authentication bypass using an empty token in github.com/projectcapsule/capsule-proxy...
GO-2023-2388 eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations in knative.dev/eventing-github
eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations in knative.dev/eventing-github...
GO-2023-2376 Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik
Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik...
GO-2023-2344 Abstrium Pydio Cells Resource Injection vulnerability in github.com/pydio/cells
Abstrium Pydio Cells Resource Injection vulnerability in github.com/pydio/cells...
GO-2023-2414 Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome
Authentication bypass vulnerability in navidrome's subsonic endpoint in github.com/navidrome/navidrome...
GO-2023-2381 Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik
Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik...
GO-2023-2341 Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes
Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes...
GO-2023-2134 Artifact Hub allows unsafe rego built-in in github.com/artifacthub/hub
Artifact Hub allows unsafe rego built-in in github.com/artifacthub/hub...
GO-2023-2166 SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb
SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb...
GO-2023-2335 Denial of service from malicious manifest in kyverno in github.com/kyverno/kyverno
Denial of service from malicious manifest in kyverno in github.com/kyverno/kyverno...
GO-2023-2188 slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier
slsa-verifier vulnerable to mproper validation of npm's publish attestations in github.com/slsa-framework/slsa-verifier...
GO-2023-2135 Artifact Hub has Incorrect Docker Hub registry check in github.com/artifacthub/hub
Artifact Hub has Incorrect Docker Hub registry check in github.com/artifacthub/hub...
GO-2023-2156 Cosmos packet-forward-middleware vulnerable to chain-halt in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware
Cosmos packet-forward-middleware vulnerable to chain-halt in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware...
GO-2023-2109 Harbor timing attack risk in github.com/goharbor/harbor
Harbor timing attack risk in github.com/goharbor/harbor...
GO-2023-2332 Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign
Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign...