4684 matches found
GO-2022-0452 Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc...
GO-2022-0378 MD5 hash support in github.com/foxcpp/maddy
MD5 hash support in github.com/foxcpp/maddy...
GO-2022-0390 Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker
Moby Docker Engine started with non-empty inheritable Linux process capabilities in github.com/docker/docker...
GO-2022-0395 GitHub CLI can execute a git binary from the current directory in github.com/cli/cli
GitHub CLI can execute a git binary from the current directory in github.com/cli/cli...
GO-2022-0369 Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs
Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs...
GO-2022-0375 Improper Access Control in github.com/treeverse/lakefs
Improper Access Control in github.com/treeverse/lakefs...
GO-2022-0392 Denial of service in go-ethereum due to CVE-2020-28362 in github.com/ethereum/go-ethereum
Denial of service in go-ethereum due to CVE-2020-28362 in github.com/ethereum/go-ethereum...
GO-2022-0372 Subdomain Takeover in Interactsh server in github.com/projectdiscovery/interactsh
Subdomain Takeover in Interactsh server in github.com/projectdiscovery/interactsh...
GO-2022-0406 Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper
Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper...
GO-2022-0387 Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd
Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd...
GO-2022-0377 SSRF in repository migration in gogs.io/gogs
SSRF in repository migration in gogs.io/gogs...
GO-2022-0367 Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme in github.com/keep-network/keep-ecdsa
Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme in github.com/keep-network/keep-ecdsa...
GO-2022-0368 Improper random number generation in github.com/coredns/coredns
Improper random number generation in github.com/coredns/coredns...
GO-2022-0396 Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
Devices resource list treated as a blacklist by default in github.com/opencontainers/runc...
GO-2022-0393 Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium
Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium...
GO-2022-0405 Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows
Potential privilege escalation on Kubernetes = v1.19 when the Argo Sever is run with --auth-mode=client in github.com/argoproj/argo-workflows...
GO-2022-0398 Import loops in account imports, nats-server DoS in github.com/nats-io/nats-server
Import loops in account imports, nats-server DoS in github.com/nats-io/nats-server...
GO-2022-0389 Unchecked hostname resolution could allow access to local network resources by users outside the local network in github.com/pterodactyl/wings
Unchecked hostname resolution could allow access to local network resources by users outside the local network in github.com/pterodactyl/wings...
GO-2022-0374 S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy
S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy...
GO-2022-0388 Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows
Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows...
GO-2022-0381 Import of incorrectly embargoed keys could cause early publication in github.com/google/exposure-notifications-server
Import of incorrectly embargoed keys could cause early publication in github.com/google/exposure-notifications-server...
GO-2022-0357 Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd
Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd...
GO-2022-0325 Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik
Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik...
GO-2022-0354 Code Injection in CRI-O in github.com/cri-o/cri-o
Code Injection in CRI-O in github.com/cri-o/cri-o...
GO-2022-0358 Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd
Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd...
GO-2022-0351 Arbitrary file write in nats-server in github.com/nats-io/nats-server
Arbitrary file write in nats-server in github.com/nats-io/nats-server...
GO-2022-0350 Code injection in Stripe CLI on windows in github.com/stripe/stripe-cli
Code injection in Stripe CLI on windows in github.com/stripe/stripe-cli...
GO-2022-0365 User object created with invalid provider data in GoTrue in github.com/netlify/gotrue
User object created with invalid provider data in GoTrue in github.com/netlify/gotrue...
GO-2022-0315 Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea
Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea...
GO-2022-0360 Ambiguous OCI manifest parsing in github.com/containerd/containerd
Ambiguous OCI manifest parsing in github.com/containerd/containerd...
GO-2022-0339 Possible filesystem space exhaustion by local users in github.com/google/fscrypt
Possible filesystem space exhaustion by local users in github.com/google/fscrypt...
GO-2022-0342 Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana
Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana...
GO-2022-0329 Improper Authentication in Capsule Proxy in github.com/clastix/capsule-proxy
Improper Authentication in Capsule Proxy in github.com/clastix/capsule-proxy...
GO-2022-0340 User login denial of service in github.com/google/fscrypt
User login denial of service in github.com/google/fscrypt...
GO-2022-0363 Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o
Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o...
GO-2022-0328 Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker...
GO-2022-0348 Account compromise in Evmos in github.com/tharsis/evmos
Account compromise in Evmos in github.com/tharsis/evmos...
GO-2022-0353 Path Traversal in Gitea in code.gitea.io/gitea
Path Traversal in Gitea in code.gitea.io/gitea...
GO-2022-0359 Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd
Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd...
GO-2022-0344 containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd
containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd...
GO-2022-0314 Cross-site Scripting in Gitea in github.com/go-gitea/gitea
Cross-site Scripting in Gitea in github.com/go-gitea/gitea...
GO-2022-0278 Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd
Unprivileged pod using hostPath can side-step active LSM when it is SELinux in github.com/containerd/containerd...
GO-2022-0303 SQL Injection in Casdoor in github.com/casdoor/casdoor
SQL Injection in Casdoor in github.com/casdoor/casdoor...
GO-2022-0231 Cross-site Scripting in github.com/schollz/rwtxt
Cross-site Scripting in github.com/schollz/rwtxt...
GO-2022-0310 Capture-replay in Gitea in code.gitea.io/gitea
Capture-replay in Gitea in code.gitea.io/gitea...
GO-2022-0295 Lookup operations do not take into account wildcards in SpiceDB in github.com/authzed/spicedb
Lookup operations do not take into account wildcards in SpiceDB in github.com/authzed/spicedb...
GO-2022-0270 Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server
Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server...
GO-2022-0250 Infinite open connection causes OctoRPKI to hang forever in github.com/cloudflare/cfrpki
Infinite open connection causes OctoRPKI to hang forever in github.com/cloudflare/cfrpki...
GO-2022-0281 Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman
Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman...