Tagged “go”
CVEs tagged go, newest first.
1746 CVEsRSS
CVE-2022-35930High· 7.1PolicyController before 0.2.1 may bypass attestation verification
PolicyController before 0.2.1 may bypass attestation verification
GO-2022-0379NoneType confusion in github.com/docker/distribution
Type confusion in github.com/docker/distribution
CVE-2022-25891High· 7.5Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages
Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages
CVE-2022-31836Critical· 9.8Path Traversal in Beego
Path Traversal in Beego
CVE-2022-33082High· 7.5PoCDenial of service in Open Policy Agent
Denial of service in Open Policy Agent
CVE-2022-25856High· 7.5Insecure path traversal in Git Trigger Source can lead to arbitrary file read
Insecure path traversal in Git Trigger Source can lead to arbitrary file read
CVE-2022-28224Medium· 5.5Calico vulnerable to pod route hijacking
Calico vulnerable to pod route hijacking
CVE-2022-31030Medium· 5.5containerd CRI plugin: Host memory exhaustion through ExecSync
containerd CRI plugin: Host memory exhaustion through ExecSync
CVE-2022-1708High· 7.5Node DOS by way of memory exhaustion through ExecSync request in CRI-O
Node DOS by way of memory exhaustion through ExecSync request in CRI-O
CVE-2022-29718Medium· 6.1Open redirect in caddy
Open redirect in caddy
CVE-2021-32546CriticalOS Command Injection in gogs
OS Command Injection in gogs
CVE-2020-13430Medium· 6.1Grafana XSS via the OpenTSDB datasource
Grafana XSS via the OpenTSDB datasource
CVE-2022-29178High· 8.8Access to Unix domain socket can lead to privileges escalation in Cilium
Access to Unix domain socket can lead to privileges escalation in Cilium
CVE-2020-29652High· 7.5golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability
CVE-2020-12458Medium· 5.5Grafana information disclosure
Grafana information disclosure
CVE-2020-8567Medium· 4.9Kubernetes Secrets Store CSI Driver plugins arbitrary file write
Kubernetes Secrets Store CSI Driver plugins arbitrary file write
CVE-2018-1002104Medium· 5.3Kubernetes ingress exposes sensitive information
Kubernetes ingress exposes sensitive information
CVE-2020-8553Medium· 5.9ingress-nginx component for Kubernetes allows file overwrite
ingress-nginx component for Kubernetes allows file overwrite
CVE-2019-12274High· 8.8Rancher Privilege Escalation Vulnerability
Rancher Privilege Escalation Vulnerability
CVE-2021-25313Medium· 6.1Rancher Cross-site Scripting Vulnerability
Rancher Cross-site Scripting Vulnerability
CVE-2022-31259Critical· 9.8Access control bypass in beego
Access control bypass in beego
CVE-2018-19653Medium· 5.9HashiCorp Consul can use cleartext agent-to-agent RPC communication
HashiCorp Consul can use cleartext agent-to-agent RPC communication
CVE-2018-17847High· 7.5golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer
golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2015-7561Low· 3.1Kubernetes in OpenShift3 Access Control Misconfiguration
Kubernetes in OpenShift3 Access Control Misconfiguration
CVE-2021-25745High· 8.1Improper Input Validation in k8s.io/ingress-nginx
Improper Input Validation in k8s.io/ingress-nginx
CVE-2022-25850High· 7.5ProxyScotch is vulnerable to a server-side Request Forgery (SSRF)
ProxyScotch is vulnerable to a server-side Request Forgery (SSRF)
CVE-2022-1227High· 8.8PoCPodman publishes a malicious image to public registries
Podman publishes a malicious image to public registries
GHSA-wm2r-rp98-8pmhLowExposure of SSH credentials in Rancher/Fleet
Exposure of SSH credentials in Rancher/Fleet
CVE-2022-27652Medium· 4.8Incorrect Default Permissions in CRI-O
Incorrect Default Permissions in CRI-O
CVE-2022-21235Critical· 9.8Command Injection Vulnerability with Mercurial in VCS
Command Injection Vulnerability with Mercurial in VCS