4632 matches found
GO-2023-1988 Improper rendering of text nodes in golang.org/x/net/html
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
GO-2023-1859 Padding oracle vulnerability in github.com/lestrrat-go/jwx
AES-CBC decryption is vulnerable to a timing attack which may permit an attacker to recover the plaintext of JWE data...
GO-2023-1826 Signature validation bypass in github.com/moov-io/signedxml
Signature validation canonicalizes the input XML document before validating the signature. Parsing the uncanonicalized and canonicalized forms can produce different results. An attacker can exploit this variation to bypass signature validation. Users of signature validation must only parse the...
GO-2023-1578 Denial of service in github.com/hashicorp/go-getter/v2
HashiCorp go-getter is vulnerable to decompression bombs. This can lead to excessive memory consumption and denial-of-service attacks...
GO-2022-0972 Panic in github.com/shamaton/msgpack/v2
Unmarshal can panic on some inputs, possibly allowing for denial of service attacks...
GO-2022-0588 Cross-site scripting via leaked style elements in github.com/microcosm-cc/bluemonday
The bluemonday HTML sanitizer can leak the contents of a "style" element into HTML output, potentially causing XSS vulnerabilities. The default bluemonday sanitization policies are not vulnerable. Only user-defined policies allowing "select", "style", and "option" elements are affected. Permittin...
GO-2022-0534 Timing attack in github.com/runatlantis/atlantis
Validation of Gitlab requests can leak secrets. The package github.com/runatlantis/atlantis/server/controllers/events uses a non-constant time comparison for secrets while validating a Gitlab request. This allows for a timing attack where an attacker can recover a secret and then forge the reques...
GO-2022-0537 Panic when decoding Float and Rat types in math/big
Decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service...
GO-2022-0253 Resource exhaustion via GZIP bomb in github.com/cloudflare/cfrpki
The HTTPFetcher.GetXML function reads a response of unlimited size into memory, permitting resource exhaustion...
GO-2022-0391 Exposure of unencrypted plaintext hash in github.com/aws/aws-sdk-go
The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute force the plaintext, if the hash is readable to the attacker. AWS now blocks this metadata field, but older SDK versions still send it...
GO-2022-0409
An attacker can create an XML file which completely bypasses signature validation, passing off an altered file as a signed one...
GO-2021-0224 Data race and crash in net/http
HTTP servers where the Handler concurrently reads the request body and writes a response can encounter a data race and crash. The httputil.ReverseProxy Handler is affected...
GO-2021-0089 Infinite loop in github.com/buger/jsonparser
Parsing malformed JSON which contain opening brackets, but not closing brackets, leads to an infinite loop. If operating on untrusted user input this can be used as a denial of service vector...
GO-2020-0021 SQL Injection in github.com/gogits/gogs
Due to improper sanitization of user input, a number of methods are vulnerable to SQL injection if used with user input that has not been sanitized by the caller...
GO-2026-6444 containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd...
GO-2026-6041 Gitea: Notification API leaks private issue metadata after access revocation in code.gitea.io/gitea
Gitea: Notification API leaks private issue metadata after access revocation in code.gitea.io/gitea...
GO-2026-5925 Suspended Coder users retain access to AI Bridge LLM proxy endpoints in github.com/coder/coder
Suspended Coder users retain access to AI Bridge LLM proxy endpoints in github.com/coder/coder...
GO-2026-5924 Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps in github.com/coder/coder
Coder's session token leaked to arbitrary hosts via coder open app for external workspace apps in github.com/coder/coder...
GO-2026-5652 QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api...
GO-2026-5706 googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken) in github.com/googleapis/mcp-toolbox
googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path validateOpaqueToken in github.com/googleapis/mcp-toolbox...
GO-2026-5671 Mattermost doesn't validate the Host header when constructing response URLs for custom slash command in github.com/mattermost/mattermost-server
Mattermost doesn't validate the Host header when constructing response URLs for custom slash command in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is...
GO-2026-5672 Nezha's private services (`EnableShowInService: false`) are enumerable via per-server endpoints, leaking name and timing data in github.com/nezhahq/nezha
Nezha's private services EnableShowInService: false are enumerable via per-server endpoints, leaking name and timing data in github.com/nezhahq/nezha. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If...
GO-2026-5580 Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge in gogs.io/gogs
Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge in gogs.io/gogs. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
GO-2026-5469 goshs has Auth Bypass via Share Token in github.com/patrickhener/goshs
goshs has Auth Bypass via Share Token in github.com/patrickhener/goshs...
GO-2026-5398 NietThijmen ShoppingCart: Command injection in the connect function in github.com/NietThijmen/ShoppingCart
NietThijmen ShoppingCart: Command injection in the connect function in github.com/NietThijmen/ShoppingCart...
GO-2026-5302 ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub
ShellHub has cross-tenant IDOR in GET /api/sessions/:uid that discloses SSH session data in github.com/shellhub-io/shellhub...
GO-2026-5303 goshs has an empty-username SFTP password authentication bypass in github.com/patrickhener/goshs
goshs has an empty-username SFTP password authentication bypass in github.com/patrickhener/goshs...
GO-2026-5375 ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI in github.com/lin-snow/ech0
ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI in github.com/lin-snow/ech0...
GO-2026-5351 Kyverno: ServiceAccount token leaked to external servers via apiCall service URL in github.com/kyverno/kyverno
Kyverno: ServiceAccount token leaked to external servers via apiCall service URL in github.com/kyverno/kyverno...
GO-2026-5358 Fleet Windows MDM Azure AD JWT Authentication Bypass in github.com/fleetdm/fleet
Fleet Windows MDM Azure AD JWT Authentication Bypass in github.com/fleetdm/fleet...
GO-2026-5004 SQL Injection via placeholder confusion with dollar quoted string literals in github.com/jackc/pgx
SQL Injection can occur when using the non-default simple protocol with a dollar quoted string literal in the SQL query. If that string literal contains text that would be interpreted as a placeholder outside of a string literal, and the value of that placeholder is controllable by the attacker, ...
GO-2026-4960 Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server
Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server...
GO-2026-4990 Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routes in github.com/gotenberg/gotenberg
Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routes in github.com/gotenberg/gotenberg...
GO-2026-4913 Fleet vulnerable to SQL Injection in MDM bootstrap package by authenticated team or global admin in github.com/fleetdm/fleet
Fleet vulnerable to SQL Injection in MDM bootstrap package by authenticated team or global admin in github.com/fleetdm/fleet...
GO-2026-4705 SiYuan globalCopyFiles: incomplete sensitive path blocklist allows reading /proc and Docker secrets in github.com/siyuan-note/siyuan/kernel
SiYuan globalCopyFiles: incomplete sensitive path blocklist allows reading /proc and Docker secrets in github.com/siyuan-note/siyuan/kernel...
GO-2026-4392 malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent
malcontent OCI image pull credential exfiltration via malicious registry token realm in github.com/chainguard-dev/malcontent...
GO-2025-4155 Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can...
GO-2025-3612 Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel
Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel...
GO-2025-3489 Rancher's SAML-based login via CLI can be denied by unauthenticated users in github.com/rancher/rancher
Rancher's SAML-based login via CLI can be denied by unauthenticated users in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
GO-2024-3330 Potential Vulnerabilities Due to Outdated golang.org/x/crypto Dependency in NanoProxy in github.com/ryanbekhen/nanoproxy
Potential Vulnerabilities Due to Outdated golang.org/x/crypto Dependency in NanoProxy in github.com/ryanbekhen/nanoproxy...
GO-2024-3196 Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory. in github.com/codeclysm/extract
Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory. in github.com/codeclysm/extract...
GO-2022-0953 HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul...
GO-2022-0938 Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd
Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd...
GO-2022-0866 Information Exposure in Heketi in github.com/heketi/heketi
Information Exposure in Heketi in github.com/heketi/heketi...
GO-2022-0873 Control character injection in console output in github.com/ipfs/go-ipfs
Control character injection in console output in github.com/ipfs/go-ipfs...
GO-2022-0827 pomerium_signature is not verified in middleware in github.com/pomerium/pomerium
pomeriumsignature is not verified in middleware in github.com/pomerium/pomerium...
GO-2022-0807 Improper Access Control in Lightning Network Daemon in github.com/lightningnetwork/lnd
Improper Access Control in Lightning Network Daemon in github.com/lightningnetwork/lnd...
GO-2022-0771 Shallow copy bug in geth in github.com/ethereum/go-ethereum
Shallow copy bug in geth in github.com/ethereum/go-ethereum...