4632 matches found
GO-2022-1014 CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o
CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o...
GO-2022-1066 Potential inter-blockchain communication (IBC) protocol compromise via "Dragonberry" vulnerability in cheqd in github.com/cheqd/cheqd-node
Potential inter-blockchain communication IBC protocol compromise via "Dragonberry" vulnerability in cheqd in github.com/cheqd/cheqd-node...
GO-2022-1062 Nomad Panics On Job Submission With Bad Artifact Stanza Source URL in github.com/hashicorp/nomad
Nomad Panics On Job Submission With Bad Artifact Stanza Source URL in github.com/hashicorp/nomad...
GO-2022-1060 Gogs vulnerable to Cross-site Scripting in gogs.io/gogs
Gogs vulnerable to Cross-site Scripting in gogs.io/gogs...
GO-2022-0985 Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker...
GO-2022-1067 Bifrost vulnerable to authentication check flaw that leads to authentication bypass in github.com/brokercap/Bifrost
Bifrost vulnerable to authentication check flaw that leads to authentication bypass in github.com/brokercap/Bifrost...
GO-2022-1023 Brokercap Bifrost subject to authentication bypass when using HTTP basic authentication in github.com/brokercap/Bifrost
Brokercap Bifrost subject to authentication bypass when using HTTP basic authentication in github.com/brokercap/Bifrost...
GO-2022-0986 Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker
Netmaker vulnerable to Insufficient Granularity of Access Control in github.com/gravitl/netmaker...
GO-2022-1015 SFTPGo WebClient vulnerable to Cross-site Scripting in github.com/drakkan/sftpgo
SFTPGo WebClient vulnerable to Cross-site Scripting in github.com/drakkan/sftpgo...
GO-2022-0936 Improperly Implemented path matching for in-toto-golang in github.com/in-toto/in-toto-golang
Improperly Implemented path matching for in-toto-golang in github.com/in-toto/in-toto-golang...
GO-2022-0981 Pinniped Supervisor Insufficient Session Expiration vulnerability in go.pinniped.dev
Pinniped Supervisor Insufficient Session Expiration vulnerability in go.pinniped.dev...
GO-2022-0938 Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd
Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd...
GO-2022-0982 Improper Privilege Management in Gitea in code.gitea.io/gitea
Improper Privilege Management in Gitea in code.gitea.io/gitea...
GO-2022-0933 Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium
Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium...
GO-2022-0939 Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker in github.com/StevenWeathers/thunderdome-planning-poker
Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker in github.com/StevenWeathers/thunderdome-planning-poker...
GO-2022-0937 Elvish vulnerable to remote code execution via the web UI backend in github.com/elves/elvish
Elvish vulnerable to remote code execution via the web UI backend in github.com/elves/elvish...
GO-2022-0983 ANSI escape characters not filtered in kubectl in k8s.io/kubernetes
ANSI escape characters not filtered in kubectl in k8s.io/kubernetes...
GO-2022-0970 elrond-go MultiESDTNFTTransfer call on a SC address with missing function name in github.com/ElrondNetwork/elrond-go
elrond-go MultiESDTNFTTransfer call on a SC address with missing function name in github.com/ElrondNetwork/elrond-go...
GO-2022-0959 Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium
Network Policies & Clusterwide Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium...
GO-2022-0924 Cross-site scripting in Dutchcoders transfer.sh in github.com/dutchcoders/transfer.sh
Cross-site scripting in Dutchcoders transfer.sh in github.com/dutchcoders/transfer.sh...
GO-2022-0971 Elrond-go has improper initialization in github.com/ElrondNetwork/elrond-go
Elrond-go has improper initialization in github.com/ElrondNetwork/elrond-go...
GO-2022-0925 Path Traversal in Dutchcoders transfer.sh in github.com/dutchcoders/transfer.sh
Path Traversal in Dutchcoders transfer.sh in github.com/dutchcoders/transfer.sh...
GO-2022-0960 Flux CLI Workload Injection in github.com/fluxcd/flux2
Flux CLI Workload Injection in github.com/fluxcd/flux2...
GO-2022-0953 HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul...
GO-2022-0922 ExternalName Services can be used to gain access to Envoy's admin interface in github.com/projectcontour/contour
ExternalName Services can be used to gain access to Envoy's admin interface in github.com/projectcontour/contour...
GO-2022-0929 Tarslip in go-unarr in github.com/gen2brain/go-unarr
Tarslip in go-unarr in github.com/gen2brain/go-unarr...
GO-2022-0964 SFTPGo vulnerable to recovery codes abuse in github.com/drakkan/sftpgo
SFTPGo vulnerable to recovery codes abuse in github.com/drakkan/sftpgo...
GO-2022-0923 Header dropping in traefik in github.com/traefik/traefik
Header dropping in traefik in github.com/traefik/traefik...
GO-2022-0928 Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows
Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows...
GO-2022-0914 Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc
Mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs in github.com/opencontainers/runc...
GO-2022-0921 Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd
Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd...
GO-2022-0910 Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes
Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes...
GO-2022-0915 Improper input validation in CNCF Cortex in github.com/cortexproject/cortex
Improper input validation in CNCF Cortex in github.com/cortexproject/cortex...
GO-2022-0890 Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes
Server Side Request Forgery SSRF in Kubernetes in k8s.io/kubernetes...
GO-2022-0906 Authentication Bypass in tyk-identity-broker in github.com/TykTechnologies/tyk-identity-broker
Authentication Bypass in tyk-identity-broker in github.com/TykTechnologies/tyk-identity-broker...
GO-2022-0919 Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings in github.com/pterodactyl/wings
Asymmetric Resource Consumption Amplification in Docker containers created by Wings in github.com/pterodactyl/wings...
GO-2022-0905 BLS Signature "Malleability" in github.com/filecoin-project/lotus
BLS Signature "Malleability" in github.com/filecoin-project/lotus...
GO-2022-0893 Access Restriction Bypass in kubernetes in github.com/kubernetes/kubernetes
Access Restriction Bypass in kubernetes in github.com/kubernetes/kubernetes...
GO-2022-0907 Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes
Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes...
GO-2022-0908 Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes
Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes...
GO-2022-0887 Access Restriction Bypass in go-ldap in github.com/go-ldap/ldap
Access Restriction Bypass in go-ldap in github.com/go-ldap/ldap...
GO-2022-0920 Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper
Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper...
GO-2022-0889 Authentication bypass by capture-replay in github.com/cosmos/ethermint
Authentication bypass by capture-replay in github.com/cosmos/ethermint...
GO-2022-0894 Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul...
GO-2022-0903 Denial-of-Service within Docker container in ktbs.dev/teler
Denial-of-Service within Docker container in ktbs.dev/teler...
GO-2022-0888 Crash due to malformed relay protocol message in github.com/syncthing/syncthing
Crash due to malformed relay protocol message in github.com/syncthing/syncthing...
GO-2022-0912 Predictable SIF UUID Identifiers in github.com/sylabs/sif
Predictable SIF UUID Identifiers in github.com/sylabs/sif...
GO-2022-0895 HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul...
GO-2022-0892 Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd
Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd...