4684 matches found
GO-2023-1800 Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium
Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium...
GO-2023-1804 Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno
Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno...
GO-2023-1819 Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno
Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno...
GO-2023-1827 Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul...
GO-2023-1793 secrets-store-csi-driver discloses service account tokens in logs in sigs.k8s.io/secrets-store-csi-driver
secrets-store-csi-driver discloses service account tokens in logs in sigs.k8s.io/secrets-store-csi-driver...
GO-2023-1803 In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima
In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima...
GO-2023-1849 Hashicorp Vault vulnerable to Cross-site Scripting in github.com/hashicorp/vault
Hashicorp Vault vulnerable to Cross-site Scripting in github.com/hashicorp/vault...
GO-2023-1785 Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium
Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium...
GO-2023-1801 kyverno seccomp control can be circumvented in github.com/kyverno/kyverno
kyverno seccomp control can be circumvented in github.com/kyverno/kyverno...
GO-2023-1828 Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul
Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul...
GO-2023-1806 mx-chain-go does not treat invalid transaction with wrong username correctly in github.com/multiversx/mx-chain-go
mx-chain-go does not treat invalid transaction with wrong username correctly in github.com/multiversx/mx-chain-go...
GO-2023-1808 Go package pydio/cells vulnerable to authorization bypass in github.com/pydio/cells
Go package pydio/cells vulnerable to authorization bypass in github.com/pydio/cells...
GO-2023-1809 go package pydio cells vulnerable to cross-site scripting in github.com/pydio/cells
go package pydio cells vulnerable to cross-site scripting in github.com/pydio/cells...
GO-2023-1852 HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul
HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul...
GO-2023-1851 HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul
HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul...
GO-2023-1831 Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation
Notation's default maxSignatureAttempts in notation verify enables an endless data attack in github.com/notaryproject/notation...
GO-2023-1707 HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation in github.com/hashicorp/nomad
HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation in github.com/hashicorp/nomad...
GO-2023-1708 HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault
HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault...
GO-2023-1718 Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer
Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer...
GO-2023-1723 SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb
SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb...
GO-2023-1716 Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer
Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer...
GO-2023-1730 Debug mode leaks confidential data in Cilium in github.com/cilium/cilium
Debug mode leaks confidential data in Cilium in github.com/cilium/cilium...
GO-2023-1700 Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker
Docker Swarm encrypted overlay network traffic may be unencrypted in github.com/docker/docker...
GO-2023-1774 Answer Missing Authorization vulnerability in github.com/answerdev/answer
Answer Missing Authorization vulnerability in github.com/answerdev/answer...
GO-2023-1758 Under-validated ComSpec and cmd.exe resolution in Mutagen projects in github.com/mutagen-io/mutagen
Under-validated ComSpec and cmd.exe resolution in Mutagen projects in github.com/mutagen-io/mutagen...
GO-2023-1768 Wings vulnerable to escape to host from installation container in github.com/pterodactyl/wings
Wings vulnerable to escape to host from installation container in github.com/pterodactyl/wings...
GO-2023-1747 Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper
Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper...
GO-2023-1764 Mutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints in github.com/mutagen-io/mutagen
Mutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints in github.com/mutagen-io/mutagen...
GO-2023-1701 Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker
Docker Swarm encrypted overlay network with a single endpoint is unauthenticated in github.com/docker/docker...
GO-2023-1738 Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer in github.com/apptainer/apptainer
Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer in github.com/apptainer/apptainer...
GO-2023-1763 On a compromised node, the fluid-csi service account can be used to modify node specs in github.com/fluid-cloudnative/fluid
On a compromised node, the fluid-csi service account can be used to modify node specs in github.com/fluid-cloudnative/fluid...
GO-2023-1721 OpenFeature Operator vulnerable to Cluster-level Privilege Escalation in github.com/open-feature/open-feature-operator
OpenFeature Operator vulnerable to Cluster-level Privilege Escalation in github.com/open-feature/open-feature-operator...
GO-2023-1761 imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy
imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy...
GO-2023-1719 Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer
Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer...
GO-2023-1754 Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor
Rekor's compressed archives can result in OOM conditions in github.com/sigstore/rekor...
GO-2023-1735 A potential risk in clusternet which can be leveraged to make a cluster-level privilege escalation in github.com/clusternet/clusternet
A potential risk in clusternet which can be leveraged to make a cluster-level privilege escalation in github.com/clusternet/clusternet...
GO-2023-1654 Answer has Observable Response Discrepancy in github.com/answerdev/answer
Answer has Observable Response Discrepancy in github.com/answerdev/answer...
GO-2023-1671 Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com
Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com...
GO-2023-1670 Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd
Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd...
GO-2023-1699 Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker
Docker Swarm encrypted overlay network may be unauthenticated in github.com/docker/docker...
GO-2023-1655 Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer
Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer...
GO-2023-1643 Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium
Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium...
GO-2023-1662 Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1682 Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc
Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc...
GO-2023-1658 Answer vulnerable to Business Logic Errors in github.com/answerdev/answer
Answer vulnerable to Business Logic Errors in github.com/answerdev/answer...
GO-2023-1660 Answer vulnerable to Business Logic Errors in github.com/answerdev/answer
Answer vulnerable to Business Logic Errors in github.com/answerdev/answer...
GO-2023-1657 Answer has Guessable CAPTCHA in github.com/answerdev/answer
Answer has Guessable CAPTCHA in github.com/answerdev/answer...
GO-2023-1656 Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1652 cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared
cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared...