4632 matches found
GO-2026-5107 OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI in go.opentelemetry.io/obi
OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI in go.opentelemetry.io/obi...
GO-2026-4528 Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo...
GO-2026-4284 Mailpit Proxy Endpoint has Server-Side Request Forgery (SSRF) vulnerability in github.com/axllent/mailpit
Mailpit Proxy Endpoint has Server-Side Request Forgery SSRF vulnerability in github.com/axllent/mailpit...
GO-2025-4005 Canonical LXD Project Existence Determination Through Error Handling in Image Get Function in github.com/canonical/lxd
Canonical LXD Project Existence Determination Through Error Handling in Image Get Function in github.com/canonical/lxd...
GO-2025-3961 Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman
Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman...
GO-2025-3935 podman kube play symlink traversal vulnerability in github.com/containers/podman
podman kube play symlink traversal vulnerability in github.com/containers/podman...
GO-2025-3605 Vulnerable to Path Traversal via Crafted ZIP File in github.com/mholt/archiver
Vulnerable to Path Traversal via Crafted ZIP File in github.com/mholt/archiver...
GO-2025-3824 Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama
Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama...
GO-2025-3816 apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko
apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko...
GO-2025-3817 Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana
Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports fro...
GO-2025-3791 Babylon vulnerable to chain half when transaction has fees different than `ubbn` in github.com/babylonlabs-io/babylon
Babylon vulnerable to chain half when transaction has fees different than ubbn in github.com/babylonlabs-io/babylon...
GO-2025-3780 OpenBao Inserts Sensitive Information into Log File when processing malformed data in github.com/openbao/openbao/sdk
OpenBao Inserts Sensitive Information into Log File when processing malformed data in github.com/openbao/openbao/sdk...
GO-2025-3763 Remote authentication bypass in github.com/gravitational/teleport
Remote authentication bypass in github.com/gravitational/teleport. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest an...
GO-2025-3777 Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman
Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman...
GO-2025-3665 Inspektor Gadget Security Policies Can be Bypassed in github.com/inspektor-gadget/inspektor-gadget
Inspektor Gadget Security Policies Can be Bypassed in github.com/inspektor-gadget/inspektor-gadget...
GO-2025-3463 DoS may temporarily disable IBC transfers to native chain in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware
DoS may temporarily disable IBC transfers to native chain in github.com/cosmos/ibc-apps/middleware/packet-forward-middleware...
GO-2025-3490 Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login in github.com/rancher/rancher
Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this...
GO-2022-0407 Listing of upload directory contents possible in github.com/ThomasLeister/prosody-filer
Listing of upload directory contents possible in github.com/ThomasLeister/prosody-filer...
GO-2022-0367 Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme in github.com/keep-network/keep-ecdsa
Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme in github.com/keep-network/keep-ecdsa...
GO-2024-2588 Mattermost race condition in github.com/mattermost/mattermost-server
Mattermost race condition in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest...
GO-2026-6117 Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method in github.com/pocket-id/pocket-id/backend
Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method in github.com/pocket-id/pocket-id/backend...
GO-2026-4803 MinIO LDAP login brute-force via user enumeration and missing rate limit in github.com/minio/minio
MinIO LDAP login brute-force via user enumeration and missing rate limit in github.com/minio/minio...
GO-2025-4019 Parallax is vulnerable to DoS via malicious p2p message in github.com/microstack-tech/parallax
Parallax is vulnerable to DoS via malicious p2p message in github.com/microstack-tech/parallax...
GO-2025-3790 File Browser's password protection of links is bypassable in github.com/filebrowser/filebrowser
File Browser's password protection of links is bypassable in github.com/filebrowser/filebrowser...
GO-2025-3507 Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux
Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux...
GO-2025-3895 HydrAIDE Authentication Bypass Vulnerability in github.com/hydraide/hydraide
HydrAIDE Authentication Bypass Vulnerability in github.com/hydraide/hydraide. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...
GO-2025-3793 File Browser: Command Execution not Limited to Scope in github.com/filebrowser/filebrowser
File Browser: Command Execution not Limited to Scope in github.com/filebrowser/filebrowser...
GO-2025-3765 SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver
SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver...
GO-2025-3623 Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server
Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...
GO-2025-4153 Grafana Incorrect Privilege Assignment vulnerability in github.com/grafana/grafana
Grafana Incorrect Privilege Assignment vulnerability in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners,...