4632 matches found
GO-2025-3516 Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/
Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/...
GO-2024-3274 Stored XSS using two files in usememos/memos in github.com/usememos/memos
Stored XSS using two files in usememos/memos in github.com/usememos/memos...
GO-2022-1263 usememos/memos Improper Access Control vulnerability in github.com/usememos/memos
usememos/memos Improper Access Control vulnerability in github.com/usememos/memos...
GO-2022-1220 usememos/memos may leak user information to an authenticated user in github.com/usememos/memos
usememos/memos may leak user information to an authenticated user in github.com/usememos/memos...
GO-2022-0494 Query predicate bypass in Zalando Skipper in github.com/zalando/skipper
Query predicate bypass in Zalando Skipper in github.com/zalando/skipper...
GO-2022-0342 Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana
Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana...
GO-2023-1924 b3log Wide unauthenticated file access in github.com/b3log/wide
b3log Wide unauthenticated file access in github.com/b3log/wide...
GO-2023-1270 usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos
usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos...
GO-2024-2791 CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o
CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o...
GO-2024-2574 Insecure CORS Configuration allowing wildcard origin with credentials in github.com/gofiber/fiber/v2
The CORS middleware allows for insecure configurations that could potentially expose the application to multiple CORS-related vulnerabilities. Specifically, it allows setting the Access-Control-Allow-Origin header to a wildcard "" while also having the Access-Control-Allow-Credentials set to true...
GO-2023-2186 Incorrect detection of reserved device names on Windows in path/filepath
On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...
GO-2023-2163 Curve KeyPairs fail to encrypt in github.com/nats-io/nkeys
Curve KeyPairs always use the same all-zeros key to encrypt data, and provide no security...
GO-2023-2043 Improper handling of special tags within script contexts in html/template
The html/template package does not apply the proper rules for handling occurrences of " contexts. This may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped. This could be leveraged to perform an XSS attack...
GO-2023-1992 Misleading message verification in golang.org/x/crypto/openpgp/clearsign
The clearsign package accepts some malformed messages, making it possible for an attacker to trick a human user but not a Go program into thinking unverified text is part of the message. With fix, messages with malformed headers in the SIGNED MESSAGE section are rejected...
GO-2023-1705 Excessive resource consumption in net/http, net/textproto and mime/multipart
Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can undercount the amount ...
GO-2022-1129 Authentication bypass in github.com/crewjam/saml
Authentication bypass is possible when processing SAML responses containing multiple Assertion elements...
GO-2022-1039 Memory exhaustion when compiling regular expressions in regexp/syntax
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...
GO-2022-0531 Session tickets lack random ticket_age_add in crypto/tls
An attacker can correlate a resumed TLS session with a previous connection. Session tickets generated by crypto/tls do not contain a randomly generated ticketageadd, which allows an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during sessio...
GO-2022-0532 Empty Cmd.Path can trigger unintended binary in os/exec on Windows
On Windows, executing Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset will unintentionally trigger execution of any binaries in the working directory named either "..com" or "..exe"...
GO-2022-0525 Improper sanitization of Transfer-Encoding headers in net/http
The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to reject the header as invalid...
GO-2022-0274 Namespace restriction bypass in github.com/opencontainers/runc
An attacker with partial control over the bind mount sources of a new container can bypass namespace restrictions...
GO-2021-0243 Panic on certain certificates in crypto/tls
crypto/tls clients can panic when provided a certificate of the wrong type for the negotiated parameters. net/http clients performing HTTPS requests are also affected...
GO-2022-0701 Directory traversal in k8s.io/kubernetes
Crafted object type names can cause directory traversal in Kubernetes. Object names are not validated before being passed to etcd. This allows attackers to write arbitrary files via a crafted object name, hence causing directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift...
GO-2021-0111
Due to improper input sanitization when marshalling Go objects into BSON, a maliciously constructed Go structure could allow an attacker to inject additional fields into a MongoDB document. Users are affected if they use this package to handle untrusted user input...
GO-2022-0706 Information disclosure in go.elastic.co/apm
Sensitive HTTP headers may not be properly sanitized before being sent to the APM server if the program panics...
GO-2021-0075 Panic due to improper validation of RPC messages in github.com/ethereum/go-ethereum
Due to improper argument validation in RPC messages, a maliciously crafted message can cause a panic, leading to denial of service...
GO-2020-0010 Elliptic curve key disclosure in github.com/square/go-jose
When using ECDH-ES an attacker can mount an invalid curve attack during decryption as the supplied public key is not checked to be on the same curve as the receivers private key...
GO-2021-0067 Panic when opening archives in archive/zip
Using Reader.Open on an archive containing a file with a path prefixed by "../" will cause a panic due to a stack overflow. If parsing user supplied archives, this may be used as a denial of service vector...
GO-2026-5764 DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream...
GO-2026-5821 Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check in github.com/nezhahq/nezha
Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check in github.com/nezhahq/nezha. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If thi...
GO-2026-4441 Infinite parsing loop in golang.org/x/net
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
GO-2025-3697 Gardener External DNS Management allows malicious google credential in DNS secret to lead to privilege escalation in github.com/gardener/external-dns-management
Gardener External DNS Management allows malicious google credential in DNS secret to lead to privilege escalation in github.com/gardener/external-dns-management...
GO-2024-3211 Graphql: information disclosure via graphql introspection in openshift in github.com/openshift/console
Graphql: information disclosure via graphql introspection in openshift in github.com/openshift/console...
GO-2022-1164 csaf-poc/csaf_distribution Cross-site Scripting vulnerability in github.com/csaf-poc/csaf_distribution
csaf-poc/csafdistribution Cross-site Scripting vulnerability in github.com/csaf-poc/csafdistribution...
GO-2022-0865 Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor
Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor...
GO-2022-0505 Insecure cookies in Openshift Origin in github.com/openshift/origin
Insecure cookies in Openshift Origin in github.com/openshift/origin...
GO-2022-0501 CloudCore CSI Driver: Malicious response from KubeEdge can crash CSI Driver controller server in github.com/kubeedge/kubeedge
CloudCore CSI Driver: Malicious response from KubeEdge can crash CSI Driver controller server in github.com/kubeedge/kubeedge...
GO-2023-2026 CasaOS Command Injection vulnerability in github.com/IceWhaleTech/CasaOS
CasaOS Command Injection vulnerability in github.com/IceWhaleTech/CasaOS...
GO-2024-2998 Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker...
GO-2024-2549 caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting in github.com/greenpau/caddy-security
caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting in github.com/greenpau/caddy-security...
GO-2024-2458 CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o
CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o...
GO-2024-2750 Kubernetes Secrets Store CSI Driver plugins arbitrary file write in github.com/Azure/secrets-store-csi-driver-provider-azure
Kubernetes Secrets Store CSI Driver plugins arbitrary file write in github.com/Azure/secrets-store-csi-driver-provider-azure. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
GO-2024-2779 Access Restriction Bypass in go-ipfs in github.com/ipfs/go-ipfs
Access Restriction Bypass in go-ipfs in github.com/ipfs/go-ipfs...
GO-2024-2652 Brute force protection bypass in github.com/argoproj/argo-cd/v2
An attacker can effectively bypass the rate limit and brute force protections in Argo CD by exploiting the application's weak cache-based mechanism. The application's brute force protection relies on a cache mechanism that tracks login attempts for each user. An attacker can overflow this cache b...
GO-2024-2456 Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4
Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4...
GO-2023-1842 Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "cgo LDFLAGS" directive. Flags containing...
GO-2023-1574 Privilege escalation via supplementary groups in github.com/containerd/containerd
Supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases and potentially escalate...
GO-2021-0105 Consensus flaw in github.com/ethereum/go-ethereum
Due to an incorrect state calculation, a specific set of transactions could cause a consensus disagreement, causing users of this package to reject a canonical chain...
GO-2021-0079 Panic in github.com/bytom/bytom
A malformed query can cause an out-of-bounds panic due to improper validation of arguments. If processing queries from untrusted parties, this may be used as a vector for denial of service attacks...
GO-2020-0049 Improper input validation in github.com/justinas/nosurf
Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...