4632 matches found
GO-2023-1681 Time-of-check time-of-use race condition in github.com/containers/podman/v4
A Time-of-check Time-of-use TOCTOU flaw appears in this version of podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system...
GO-2022-1031 Open redirect in github.com/labstack/echo/v4
Labstack Echo contains an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery SSRF...
GO-2022-0230 Improper limitation of path name in github.com/containernetworking/cni
The FindInPath function is vulnerable to directory traversal attacks, potentially permitting attackers to execute arbitrary binaries. This function does not sanitize its plugin parameter, so parameter names containing "../" or other such elements may reference arbitrary locations on the filesyste...
GO-2022-0402 Panic in NATS JWT decoding in github.com/nats-io/jwt
A malicious account can create and sign a User JWT which causes a panic when decoded by the NATS JWT library...
GO-2021-0056
Due to the behavior of encoding/xml, a crafted XML document may cause XML Digital Signature validation to be entirely bypassed, causing an unsigned document to appear signed...
GO-2020-0045 Cryptographically weak random number generation in github.com/dinever/golf
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests...
GO-2021-0059 Panic due to improper input validation in Get in github.com/tidwall/gjson
Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...
GO-2021-0077 Authentication bypass in go.etcd.io/etcd
A user can use a valid client certificate that contains a CommonName that matches a valid RBAC username to authenticate themselves as that user, despite lacking the required credentials. This may allow authentication bypass, but requires a certificate that is issued by a CA trusted by the server...
GO-2021-0065 Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go
Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level...
GO-2026-5746 Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker
The Docker daemon's implementation of the "PUT /containers/id/archive" endpoint executes a container binary on the host when extracting an archive to a container. On Unix-like systems, this can be exploited if an attacker can control the container's filesystem or the archive being extracted,...
GO-2025-3538 kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp
kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace in github.com/kcp-dev/kcp...
GO-2025-3522 Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes
Kubernetes allows Command Injection affecting Windows nodes via nodes//logs/query API in k8s.io/kubernetes...
GO-2025-3444 Improper Access Control in wazuh-agent in github.com/wazuh/wazuh
Improper Access Control in wazuh-agent in github.com/wazuh/wazuh...
GO-2025-3434 KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller...
GO-2024-3315 CVE-2024-46455 in github.com/Unstructured-IO/unstructured
CVE-2024-46455 in github.com/Unstructured-IO/unstructured...
GO-2024-3122 Groth16 commitment extension unsound for more than one commitment in github.com/consensys/gnark
Groth16 commitment extension unsound for more than one commitment in github.com/consensys/gnark...
GO-2024-3246 Hashicorp Vault vulnerable to denial of service through memory exhaustion in github.com/hashicorp/vault
Hashicorp Vault vulnerable to denial of service through memory exhaustion in github.com/hashicorp/vault...
GO-2024-3125 Gouniverse GoLang CMS vulnerable to Cross-site Scripting in github.com/gouniverse/cms
Gouniverse GoLang CMS vulnerable to Cross-site Scripting in github.com/gouniverse/cms...
GO-2024-3086 Casdoor has reflected XSS in QrCodePage.js (GHSL-2024-036) in github.com/casdoor/casdoor
Casdoor has reflected XSS in QrCodePage.js GHSL-2024-036 in github.com/casdoor/casdoor...
GO-2022-1106 HashiCorp Nomad vulnerable to Insufficient Session Expiration in github.com/hashicorp/nomad
HashiCorp Nomad vulnerable to Insufficient Session Expiration in github.com/hashicorp/nomad...
GO-2022-0834 Information Exposure in jaeger in github.com/jaegertracing/jaeger
Information Exposure in jaeger in github.com/jaegertracing/jaeger...
GO-2023-1986 HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault
HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault...
GO-2024-3032 Mattermost did not properly restrict channel creation in github.com/mattermost/mattermost-server
Mattermost did not properly restrict channel creation in github.com/mattermost/mattermost-server...
GO-2024-3005 Moby authz zero length regression in github.com/moby/moby
Moby authz zero length regression in github.com/moby/moby...
GO-2024-2457 Apache Answer Race Condition vulnerability in github.com/apache/incubator-answer
Apache Answer Race Condition vulnerability in github.com/apache/incubator-answer...
GO-2024-2500 Moby (Docker Engine) Insufficiently restricted permissions on data directory in github.com/docker/docker
Moby Docker Engine Insufficiently restricted permissions on data directory in github.com/docker/docker...
GO-2024-2768 Rancher does not properly specify ApiGroup when creating Kubernetes RBAC resources in github.com/rancher/rancher
Rancher does not properly specify ApiGroup when creating Kubernetes RBAC resources in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...
GO-2024-2698 Archiver Path Traversal vulnerability in github.com/mholt/archiver
A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...
GO-2024-2854 Grafana folders admin only permission privilege escalation in github.com/grafana/grafana
Grafana folders admin only permission privilege escalation in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...
GO-2024-2752 Gitea Open Redirect in code.gitea.io/gitea
Gitea Open Redirect in code.gitea.io/gitea...
GO-2024-2613 Unauthorized Console access in github.com/1Panel-dev/1Panel
If the user attempts to access a secure entry point and intercepts with Burp, they can get access to the console page. This access does not return data nor allow modification operations...
GO-2024-2605 SQL injection in github.com/jackc/pgx/v4
SQL injection is possible when the database uses the non-default simple protocol, a minus sign directly precedes a numeric placeholder followed by a string placeholder on the same line, and both parameter values are user-controlled...
GO-2024-2599 Memory exhaustion in multipart form parsing in net/textproto and net/http
When parsing a multipart form either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile, limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a...
GO-2023-2380 Private key recovery via invalid curve point in github.com/ecies/go/v2
An attacker may be able to recover private keys due to a bug in the ECDH function. The library does not check whether the provided public key is on the curve, which means that an attacker can create a public key that is not on the curve and use it to recover the private key. A workaround is to...
GO-2023-2181 Denial of service attack from remote registry in github.com/sigstore/cosign
An attacker who controls a remote registry can return a high number of attestations and/or signatures to cosign. This can cause cosign to enter a long loop resulting in a denial of service, i.e., endless data attack...
GO-2022-0980 Exposure of Vault secrets via error messages in github.com/hashicorp/consul-template
The text of errors returned by Template.Execute can contain Vault secrets, potentially revealing these secrets in logs or error reports...
GO-2022-0523 Stack exhaustion when unmarshaling certain documents in encoding/xml
Unmarshaling an XML document into a Go struct which has a nested field that uses the 'any' field tag can panic due to stack exhaustion...
GO-2022-0643 Denial of service in github.com/elastic/beats
A local attacker can cause a panic if they are able to send arbitrary traffic to a monitored port, due to an out of bounds read...
GO-2021-0157
The MIME header parser treated spaces and hyphens as equivalent, which can permit HTTP request smuggling...
GO-2022-0762 Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday
An XSS injection was possible because the sanitization of the Cyrillic character i bypass a protection mechanism against user-inputted HTML elements such as the tag...
GO-2021-0073 Arbitrary command execution in github.com/git-lfs/git-lfs
Arbitrary command execution can be triggered by improperly sanitized SSH URLs in LFS configuration files. This can be triggered by cloning a malicious repository...
GO-2020-0039 Open redirect in gopkg.in/macaron.v1
Due to improper request sanitization, a specifically crafted URL can cause the static file handler to redirect to an attacker chosen URL, allowing for open redirect attacks...
GO-2020-0012 Panic due to improper verification of cryptographic signatures in golang.org/x/crypto/ssh
An attacker can craft an ssh-ed25519 or [email protected] public key, such that the library will panic when trying to verify a signature with it. If verifying signatures using user supplied public keys, this may be used as a denial of service vector...
GO-2020-0027 Privilege escalation in github.com/google/fscrypt
After dropping and then elevating process privileges euid, guid, and groups are not properly restored to their original values, allowing an unprivileged user to gain membership in the root group...
GO-2021-0060 Authentication bypass in github.com/russellhaering/gosaml2
Due to the behavior of encoding/xml, a crafted XML document may cause XML Digital Signature validation to be entirely bypassed, causing an unsigned document to appear signed...
GO-2020-0040 Uncontrolled Resource Consumption in github.com/shiyanhui/dht
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...
GO-2021-0068 Arbitrary code injection via the go command with cgo on Windows in cmd/go
The go command may execute arbitrary code at build time when using cgo on Windows. This can be triggered by running go get on a malicious module, or any other time the code is built...
GO-2026-6452 Panic via negative shared-string index in github.com/xuri/excelize
In github.com/xuri/excelize/v2, parsing a spreadsheet cell with a negative shared-string index causes a runtime panic. The shared-string lookup in xlsxC.getValueFrom checks only the upper bound of the parsed index against the shared-string slice length, causing negative indices such as -1 to bypa...
GO-2026-6460 rclone: RC per-server auth-proxy bypass in github.com/rclone/rclone
rclone: RC per-server auth-proxy bypass in github.com/rclone/rclone...
GO-2026-5846 Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook in github.com/fission/fission
Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook in github.com/fission/fission...