4632 matches found
GO-2023-1831 Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation
Notation's default maxSignatureAttempts in notation verify enables an endless data attack in github.com/notaryproject/notation...
GO-2023-1828 Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul
Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul...
GO-2023-1801 kyverno seccomp control can be circumvented in github.com/kyverno/kyverno
kyverno seccomp control can be circumvented in github.com/kyverno/kyverno...
GO-2023-1806 mx-chain-go does not treat invalid transaction with wrong username correctly in github.com/multiversx/mx-chain-go
mx-chain-go does not treat invalid transaction with wrong username correctly in github.com/multiversx/mx-chain-go...
GO-2023-1851 HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul
HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul...
GO-2023-1795 malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor
malformed proposed intoto entries can cause a panic in github.com/sigstore/rekor...
GO-2023-1852 HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul
HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul...
GO-2023-1804 Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno
Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno...
GO-2023-1853 HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul
HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul...
GO-2023-1827 Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul...
GO-2023-1800 Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium
Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium...
GO-2023-1829 Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation
Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation...
GO-2023-1808 Go package pydio/cells vulnerable to authorization bypass in github.com/pydio/cells
Go package pydio/cells vulnerable to authorization bypass in github.com/pydio/cells...
GO-2023-1850 HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul
HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul...
GO-2023-1774 Answer Missing Authorization vulnerability in github.com/answerdev/answer
Answer Missing Authorization vulnerability in github.com/answerdev/answer...
GO-2023-1716 Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer
Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer...
GO-2023-1735 A potential risk in clusternet which can be leveraged to make a cluster-level privilege escalation in github.com/clusternet/clusternet
A potential risk in clusternet which can be leveraged to make a cluster-level privilege escalation in github.com/clusternet/clusternet...
GO-2023-1730 Debug mode leaks confidential data in Cilium in github.com/cilium/cilium
Debug mode leaks confidential data in Cilium in github.com/cilium/cilium...
GO-2023-1754 Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor...
GO-2023-1758 Under-validated ComSpec and cmd.exe resolution in Mutagen projects in github.com/mutagen-io/mutagen
Under-validated ComSpec and cmd.exe resolution in Mutagen projects in github.com/mutagen-io/mutagen...
GO-2023-1768 Wings vulnerable to escape to host from installation container in github.com/pterodactyl/wings
Wings vulnerable to escape to host from installation container in github.com/pterodactyl/wings...
GO-2023-1747 Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper
Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper...
GO-2023-1764 Mutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints in github.com/mutagen-io/mutagen
Mutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints in github.com/mutagen-io/mutagen...
GO-2023-1718 Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer
Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer...
GO-2023-1701 Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker
Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker...
GO-2023-1719 Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer
Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer...
GO-2023-1738 Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer in github.com/apptainer/apptainer
Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer in github.com/apptainer/apptainer...
GO-2023-1723 SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb
SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb...
GO-2023-1708 HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault
HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault...
GO-2023-1763 On a compromised node, the fluid-csi service account can be used to modify node specs in github.com/fluid-cloudnative/fluid
On a compromised node, the fluid-csi service account can be used to modify node specs in github.com/fluid-cloudnative/fluid...
GO-2023-1721 OpenFeature Operator vulnerable to Cluster-level Privilege Escalation in github.com/open-feature/open-feature-operator
OpenFeature Operator vulnerable to Cluster-level Privilege Escalation in github.com/open-feature/open-feature-operator...
GO-2023-1700 Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker
Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker...
GO-2023-1761 imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy
imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy...
GO-2023-1707 HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation in github.com/hashicorp/nomad
HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation in github.com/hashicorp/nomad...
GO-2023-1662 Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1671 Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com
Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com...
GO-2023-1670 Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd
Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd...
GO-2023-1655 Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer
Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer...
GO-2023-1643 Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium
Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium...
GO-2023-1644 Cilium eBPF filters may be temporarily removed during agent restart in github.com/cilium/cilium
Cilium eBPF filters may be temporarily removed during agent restart in github.com/cilium/cilium...
GO-2023-1660 Answer vulnerable to Business Logic Errors in github.com/answerdev/answer
Answer vulnerable to Business Logic Errors in github.com/answerdev/answer...
GO-2023-1682 Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc...
GO-2023-1658 Answer vulnerable to Business Logic Errors in github.com/answerdev/answer
Answer vulnerable to Business Logic Errors in github.com/answerdev/answer...
GO-2023-1699 Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker
Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker...
GO-2023-1657 Answer has Guessable CAPTCHA in github.com/answerdev/answer
Answer has Guessable CAPTCHA in github.com/answerdev/answer...
GO-2023-1656 Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1652 cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared
cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared...
GO-2023-1659 Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer
Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer...
GO-2023-1653 `cilium-cli` disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli
cilium-cli disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli...