github.com/cubefs/cubefs vulnerabilities

CVEs whose affected-version data names the github.com/cubefs/cubefs package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2023-46739Medium· 6.5

CubeFS timing attack can leak user passwords

CubeFS timing attack can leak user passwords

▾ Sunlitcubefs · github.com/cubefs/cubefsEPSS 0.35%via OSV

CVE-2023-46740Medium· 6.5

Insecure random string generator used for sensitive data

Insecure random string generator used for sensitive data

▾ Sunlitcubefs · github.com/cubefs/cubefsEPSS 0.44%via OSV

github.com/cubefs/cubefs vulnerabilities (CVEs) · VulnSea