Security advisories

medium2022-12-28

CVE-2018-25053-Json2html vulnerable to cross-site scripting

View chart →

moappi/json2html · GHSA-79mp-cxp4-9p6r

high2022-12-28

CVE-2020-36562-shiyanhui/dht vulnerable to Uncontrolled Resource Consumption

View chart →

shiyanhui/dht · GHSA-p6fg-723f-hgpw

high2022-12-28

CVE-2022-3347-go-resolver's DNSSEC validation not performed correctly

View chart →

peterzen/goresolver · GHSA-jr65-gpj5-cw74

high2022-12-28

CVE-2022-3346-go-resolver vulnerable to attacker-controlled domains due to unvalidated RRSIG RRs

View chart →

peterzen/goresolver · GHSA-87mm-qxm5-cp3f

medium2022-12-28

CVE-2020-36563-go-saml's XML Digital Signatures use SHA-1

View chart →

robotsandpencils/go-saml · GHSA-5rhg-xhgr-5hfj

high2022-12-28

CVE-2020-36559-ahh vulnerable to Path Traversal

View chart →

go-aah/aah · GHSA-vp56-r7qv-783v

critical2022-12-28

CVE-2020-36560-go-unzip vulnerable to Path Traversal

View chart →

artdarek/go-unzip · GHSA-rmj9-q58g-9qgg

medium2022-12-28

CVE-2021-4235-YAML Go package vulnerable to denial of service

View chart →

go-yaml/yaml · GHSA-r88r-gmrh-7j83

high2022-12-28

CVE-2016-15005-Golf may allow attacker to bypass CSRF protections due to weak PRNG

View chart →

dinever/golf · GHSA-q9qr-jwpw-3qvv

critical2022-12-28

CVE-2020-36566-tar-utils Path Traversal vulnerability

View chart →

whyrusleeping/tar-utils · GHSA-jpf8-h7h7-3ppm

critical2022-12-28

CVE-2017-20146-gorilla/handlers may allow requester to bypass expected behavior of the Same Origin Policy

View chart →

gorilla/handlers · GHSA-jcr6-mmjj-pchw

critical2022-12-28

CVE-2020-36569-golang-nanoauth authentication bypass vulnerability

View chart →

nanobox-io/golang-nanoauth · GHSA-hrm3-3xm6-x33h

medium2022-12-28

CVE-2020-36568-revel is vulnerable to resource exhaustion

View chart →

revel/revel · GHSA-hggr-p7v6-73p5

high2022-12-28

CVE-2013-10005-socks Infinite Loop vulnerability

View chart →

btcsuite/go-socks · GHSA-gxgj-xjcw-fv9p

high2022-12-28

CVE-2019-25073-Goa vulnerable to path traversal

View chart →

goadesign/goa · GHSA-fjgq-224f-fq37

critical2022-12-28

CVE-2020-36561-Unzip vulnerable to path traversal

View chart →

yi-ge/unzip · GHSA-f5c5-hmw9-v8hx

medium2022-12-28

CVE-2022-2582-AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field

View chart →

aws/aws-sdk-go · GHSA-6jvc-q2x7-pchv

high2022-12-28

CVE-2021-4239-Noise vulnerable to denial of service

View chart →

flynn/noise · GHSA-6cr6-fmvc-vw2p

high2022-12-28

CVE-2020-36564-nosurf vulnerable to improper input validation

View chart →

justinas/nosurf · GHSA-5x84-q523-vvwr

high2022-12-28

CVE-2015-10004-robbert229/jwt's token validation methods vulnerable to a timing side-channel during HMAC comparison

View chart →

robbert229/jwt · GHSA-5vw4-v588-pgv8