4632 matches found
GO-2022-0386 Import token permissions checking not enforced in github.com/nats-io/jwt
Import tokens valid for one account may be used for any other account. Validation of Import token bindings incorrectly warns on mismatches, rather than rejecting the Goken. This permits a token for one account to be used for any other account...
GO-2022-0417 Incorrect default permissions in github.com/containers/buildah
Containers are created with non-empty inheritable Linux process capabilities, permitting programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve2. This bug does not affect the container security sandbox, as the inheritable set never contains mo...
GO-2022-0477 Indefinite hang with large buffers on Windows in crypto/rand
On Windows, rand.Read will hang indefinitely if passed a buffer larger than 1 32 - 1 bytes...
GO-2021-0245 Panic in ReverseProxy in net/http/httputil
ReverseProxy can panic after encountering a problem copying a proxied response body...
GO-2022-0629 Directory traversal in sigs.k8s.io/secrets-store-csi-driver
Modifying pod status allows host directory traversal. Kubernetes Secrets Store CSI Driver allows an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under...
GO-2021-0088 Denial of service via ignored unknown fields in github.com/facebook/fbthrift
Skip ignores unknown fields, rather than failing. A malicious user can craft small messages with unknown fields which can take significant resources to parse. If a server accepts messages from an untrusted user, it may be used as a denial of service vector...
GO-2020-0008 Insecure generation of random numbers in github.com/miekg/dns
DNS message transaction IDs are generated using math/rand which makes them relatively predictable. This reduces the complexity of response spoofing attacks against DNS clients...
GO-2026-5476 Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend
Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend...
GO-2026-5338 containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd
containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd...
GO-2026-5234 Gotenberg's ExifTool group-prefix syntax bypasses dangerous-tag blocklist in github.com/gotenberg/gotenberg
Gotenberg's ExifTool group-prefix syntax bypasses dangerous-tag blocklist in github.com/gotenberg/gotenberg...
GO-2025-3383 GOAUTH credential leak in cmd/go
Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...
GO-2024-3201 JWT token compromise can allow malicious actions including Remote Code Execution (RCE) in github.com/neuvector/neuvector
JWT token compromise can allow malicious actions including Remote Code Execution RCE in github.com/neuvector/neuvector...
GO-2024-3126 External Secrets Operator vulnerable to privilege escalation in github.com/external-secrets/external-secrets
External Secrets Operator vulnerable to privilege escalation in github.com/external-secrets/external-secrets...
GO-2024-3093 Mattermost doesn't redact remote users' original email addresses in github.com/mattermost/mattermost-server
Mattermost doesn't redact remote users' original email addresses in github.com/mattermost/mattermost-server...
GO-2022-0921 Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd
Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd...
GO-2022-0798 Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server
Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server...
GO-2022-0805 github.com/u-root/u-root/pkg/tarutil Arbitrary File Write via Archive Extraction (Zip Slip) in github.com/u-root/u-root
github.com/u-root/u-root/pkg/tarutil Arbitrary File Write via Archive Extraction Zip Slip in github.com/u-root/u-root...
GO-2022-0774 Improper Authentication in github.com/containous/traefik
Improper Authentication in github.com/containous/traefik...
GO-2023-2336 Denial of service from malicious image manifest in kyverno in github.com/kyverno/kyverno
Denial of service from malicious image manifest in kyverno in github.com/kyverno/kyverno...
GO-2023-2121 OpenFGA DoS vulnerability in github.com/openfga/openfga
OpenFGA DoS vulnerability in github.com/openfga/openfga...
GO-2023-2018 Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd
Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd...
GO-2024-3073 Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad
Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking in github.com/hashicorp/nomad. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
GO-2024-3065 Apache Answer: The link for resetting user password is not Single-Use in github.com/apache/incubator-answer
Apache Answer: The link for resetting user password is not Single-Use in github.com/apache/incubator-answer...
GO-2024-3030 Mattermost failed to properly validate synced reactions in github.com/mattermost/mattermost-server
Mattermost failed to properly validate synced reactions in github.com/mattermost/mattermost-server...
GO-2024-3034 Volcano has insecure permissions in volcano.sh/volcano
Volcano has insecure permissions in volcano.sh/volcano...
GO-2024-2561 Server-Side Request Forgery in github.com/greenpau/caddy-security
Server-Side Request Forgery in github.com/greenpau/caddy-security...
GO-2024-2532 Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary
Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary...
GO-2024-2514 Token leases could outlive their TTL in HashiCorp Vault in github.com/hashicorp/vault
Token leases could outlive their TTL in HashiCorp Vault in github.com/hashicorp/vault...
GO-2024-2753 Denial of service in Kubernetes in k8s.io/kubernetes
Denial of service in Kubernetes in k8s.io/kubernetes...
GO-2024-2717 LocalAI Command Injection in audioToWav in github.com/go-skynet/LocalAI
LocalAI Command Injection in audioToWav in github.com/go-skynet/LocalAI. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...
GO-2024-2629 Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana
Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...
GO-2024-2771 Rancher's Steve API Component Improper authorization check allows privilege escalation in github.com/rancher/rancher
Rancher's Steve API Component Improper authorization check allows privilege escalation in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...
GO-2024-2756 Privilege Escalation in kubevirt in kubevirt.io/kubevirt
Privilege Escalation in kubevirt in kubevirt.io/kubevirt...
GO-2024-2657 Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium
In Cilium clusters with WireGuard enabled and traffic matching Layer 7 policies: traffic that should be WireGuard-encrypted is sent unencrypted between a node's Envoy proxy and pods on other nodes, and traffic that should be WireGuard-encrypted is sent unencrypted between a node's DNS proxy and...
GO-2024-2459 Denial of service via path validation in github.com/quic-go/quic-go
Denial of service via path validation in github.com/quic-go/quic-go...
GO-2023-2399 Denial of service via memory exhaustion in github.com/hashicorp/vault
Unauthenticated and authenticated HTTP requests from a client will be attempted to be mapped to memory. Large requests may result in the exhaustion of available memory on the host, which may cause crashes and denial of service...
GO-2023-1930 Unrestricted memory consumption in github.com/hamba/avro
Unrestricted memory consumption in github.com/hamba/avro...
GO-2023-1737 Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin
The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of...
GO-2023-1681 Time-of-check time-of-use race condition in github.com/containers/podman/v4
A Time-of-check Time-of-use TOCTOU flaw appears in this version of podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system...
GO-2022-0536 Reset flood in net/http and golang.org/x/net/http
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. Servers that accept direct connections from untrusted clients could be remotely made to allocate an unlimited amount of memory, until the program crashes. The attacker opens a number of stream...
GO-2022-0230 Improper limitation of path name in github.com/containernetworking/cni
The FindInPath function is vulnerable to directory traversal attacks, potentially permitting attackers to execute arbitrary binaries. This function does not sanitize its plugin parameter, so parameter names containing "../" or other such elements may reference arbitrary locations on the filesyste...
GO-2022-0402 Panic in NATS JWT decoding in github.com/nats-io/jwt
A malicious account can create and sign a User JWT which causes a panic when decoded by the NATS JWT library...
GO-2021-0263 Panic on invalid symbol tables in debug/macho
Calling File.ImportedSymbols on a loaded file which contains an invalid dynamic symbol table command can cause a panic, in particular if the encoded number of undefined symbols is larger than the number of symbols in the symbol table...
GO-2021-0141
A Go HTTP server which reads from the request body while simultaneously writing a response can panic when clients send a "Expect: 100-continue" header...
GO-2021-0056
Due to the behavior of encoding/xml, a crafted XML document may cause XML Digital Signature validation to be entirely bypassed, causing an unsigned document to appear signed...
GO-2020-0045 Cryptographically weak random number generation in github.com/dinever/golf
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests...
GO-2021-0065 Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go
Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level...
GO-2021-0059 Panic due to improper input validation in Get in github.com/tidwall/gjson
Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...
GO-2021-0077 Authentication bypass in go.etcd.io/etcd
A user can use a valid client certificate that contains a CommonName that matches a valid RBAC username to authenticate themselves as that user, despite lacking the required credentials. This may allow authentication bypass, but requires a certificate that is issued by a CA trusted by the server...
GO-2025-3538 kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp
kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp...