Tagged “go”
CVEs tagged go, newest first.
2111 CVEsRSS
CVE-2022-33082High· 7.5PoCDenial of service in Open Policy Agent
Denial of service in Open Policy Agent
CVE-2022-25856High· 7.5Insecure path traversal in Git Trigger Source can lead to arbitrary file read
Insecure path traversal in Git Trigger Source can lead to arbitrary file read
CVE-2022-28224Medium· 5.5Calico vulnerable to pod route hijacking
Calico vulnerable to pod route hijacking
CVE-2022-31030Medium· 5.5containerd CRI plugin: Host memory exhaustion through ExecSync
containerd CRI plugin: Host memory exhaustion through ExecSync
CVE-2022-1708High· 7.5Node DOS by way of memory exhaustion through ExecSync request in CRI-O
Node DOS by way of memory exhaustion through ExecSync request in CRI-O
CVE-2022-29718Medium· 6.1Open redirect in caddy
Open redirect in caddy
CVE-2021-32546CriticalOS Command Injection in gogs
OS Command Injection in gogs
CVE-2020-13430Medium· 6.1Grafana XSS via the OpenTSDB datasource
Grafana XSS via the OpenTSDB datasource
CVE-2022-29178High· 8.8Access to Unix domain socket can lead to privileges escalation in Cilium
Access to Unix domain socket can lead to privileges escalation in Cilium
CVE-2020-29652High· 7.5golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability
CVE-2020-12458Medium· 5.5Grafana information disclosure
Grafana information disclosure
CVE-2019-9512High· 7.5golang.org/x/net/http vulnerable to a reset flood
golang.org/x/net/http vulnerable to a reset flood
CVE-2020-8567Medium· 4.9Kubernetes Secrets Store CSI Driver plugins arbitrary file write
Kubernetes Secrets Store CSI Driver plugins arbitrary file write
CVE-2019-9901Critical· 10.0EnvoyProxy Envoy Missing HTTP URL path normalization
EnvoyProxy Envoy Missing HTTP URL path normalization
CVE-2018-1002104Medium· 5.3Kubernetes ingress exposes sensitive information
Kubernetes ingress exposes sensitive information
CVE-2020-8553Medium· 5.9ingress-nginx component for Kubernetes allows file overwrite
ingress-nginx component for Kubernetes allows file overwrite
CVE-2019-12274High· 8.8Rancher Privilege Escalation Vulnerability
Rancher Privilege Escalation Vulnerability
CVE-2021-25313Medium· 6.1Rancher Cross-site Scripting Vulnerability
Rancher Cross-site Scripting Vulnerability
CVE-2022-24904Medium· 4.3Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server
Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server
CVE-2022-31259Critical· 9.8Access control bypass in beego
Access control bypass in beego
CVE-2018-19653Medium· 5.9HashiCorp Consul can use cleartext agent-to-agent RPC communication
HashiCorp Consul can use cleartext agent-to-agent RPC communication
CVE-2018-17847High· 7.5golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer
golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2015-7561Low· 3.1Kubernetes in OpenShift3 Access Control Misconfiguration
Kubernetes in OpenShift3 Access Control Misconfiguration
CVE-2021-25745High· 8.1Improper Input Validation in k8s.io/ingress-nginx
Improper Input Validation in k8s.io/ingress-nginx
CVE-2022-25850High· 7.5ProxyScotch is vulnerable to a server-side Request Forgery (SSRF)
ProxyScotch is vulnerable to a server-side Request Forgery (SSRF)
CVE-2022-1227High· 8.8PoCPodman publishes a malicious image to public registries
Podman publishes a malicious image to public registries
GHSA-wm2r-rp98-8pmhLowExposure of SSH credentials in Rancher/Fleet
Exposure of SSH credentials in Rancher/Fleet
CVE-2022-27652Medium· 4.8Incorrect Default Permissions in CRI-O
Incorrect Default Permissions in CRI-O
CVE-2022-21235Critical· 9.8Command Injection Vulnerability with Mercurial in VCS
Command Injection Vulnerability with Mercurial in VCS
CVE-2022-27649High· 7.5Podman's default inheritable capabilities for linux container not empty
Podman's default inheritable capabilities for linux container not empty