Tagged “go”
CVEs tagged go, newest first.
2111 CVEsRSS
CVE-2024-36586High· 8.8AdGuardHome privilege escalation vulnerability
AdGuardHome privilege escalation vulnerability
CVE-2023-49559Medium· 5.3gqlparser denial of service vulnerability via the parserDirectives function
gqlparser denial of service vulnerability via the parserDirectives function
CVE-2024-5798Low· 2.6HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims
HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims
CVE-2024-5154High· 8.1Cri-o: malicious container can create symlink on host
A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.
GHSA-7jmw-8259-q9jxMediumTraefik has unexpected behavior with IPv4-mapped IPv6 addresses
Traefik has unexpected behavior with IPv4-mapped IPv6 addresses
GHSA-87m9-rv8p-rgmgHigh· 7.5go-grpc-compression has a zstd decompression bombing vulnerability
go-grpc-compression has a zstd decompression bombing vulnerability
CVE-2021-41089Low· 2.8`docker cp` allows unexpected chmod of host files in Moby Docker Engine
`docker cp` allows unexpected chmod of host files in Moby Docker Engine
CVE-2024-37152Medium· 5.3PoCUnauthenticated Access to sensitive settings in Argo CD
Unauthenticated Access to sensitive settings in Argo CD
CVE-2024-36106Medium· 4.3Argo-cd authenticated users can enumerate clusters by name
Argo-cd authenticated users can enumerate clusters by name
GO-2024-2880NoneTraefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik
Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik
GO-2024-2726NoneTraefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik
Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik
CVE-2024-22261Low· 2.7SQL Injection in Harbor scan log API
SQL Injection in Harbor scan log API
CVE-2024-22244Medium· 4.3Open Redirect URL in Harbor
Open Redirect URL in Harbor
CVE-2024-36107Medium· 5.3MinIO information disclosure vulnerability
MinIO information disclosure vulnerability
CVE-2024-35232Low· 3.7github.com/huandu/facebook may expose access_token in error message.
github.com/huandu/facebook may expose access_token in error message.
GHSA-f7cq-5v43-8pwpMedium· 5.3Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop
Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop
CVE-2024-35223Medium· 5.3Dapr API Token Exposure
Dapr API Token Exposure
CVE-2024-35175Medium· 5.3sshpiper's enabling of proxy protocol without proper feature flagging allows faking source address
sshpiper's enabling of proxy protocol without proper feature flagging allows faking source address
CVE-2021-41244Critical· 9.1Grafana Fine-grained access control vulnerability
Grafana Fine-grained access control vulnerability
CVE-2021-43815Medium· 4.3Grafana directory traversal for .cvs files
Grafana directory traversal for .cvs files
CVE-2024-3727High· 8.3A flaw was found in the github.com/containers/image library
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
CVE-2024-34079Low· 3.7octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage
octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage
CVE-2024-32886Medium· 4.9Vitess vulnerable to infinite memory consumption and vtgate crash
Vitess vulnerable to infinite memory consumption and vtgate crash
CVE-2024-33394Medium· 5.9kubevirt allows a local attacker to execute arbitrary code via a crafted command
kubevirt allows a local attacker to execute arbitrary code via a crafted command
CVE-2024-32963Medium· 4.2Navidrome Parameter Tampering vulnerability
Navidrome Parameter Tampering vulnerability
CVE-2024-33522Medium· 6.7Calico privilege escalation vulnerability
Calico privilege escalation vulnerability
CVE-2023-46565High· 7.5Buffer Overflow vulnerability in osrg gobgp
Buffer Overflow vulnerability in osrg gobgp
CVE-2024-3154High· 7.2A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation
A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.
CVE-2024-32476Medium· 6.5Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences
Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences
CVE-2020-8559Medium· 6.8PoCPrivilege Escalation in Kubernetes
Privilege Escalation in Kubernetes