Tagged “go”
CVEs tagged go, newest first.
2112 CVEsRSS
CVE-2021-22538High· 8.8Privilege escalation in rbac
Privilege escalation in rbac
CVE-2021-21405Medium· 5.9BLS Signature "Malleability"
BLS Signature "Malleability"
CVE-2021-29651Medium· 6.3JWT leak via Open Redirect in Programmatic access
JWT leak via Open Redirect in Programmatic access
CVE-2021-33194High· 7.5golang: x/net/html: infinite loop in ParseFragment (CVE-2021-33194)
A flaw was found in golang. An attacker can craft an input to ParseFragment within parse.go that would cause it to enter an infinite loop and never return. The greatest threat to the system is of availability.
CVE-2020-7219High· 7.5Denial of Service (DoS) in HashiCorp Consul
Denial of Service (DoS) in HashiCorp Consul
CVE-2021-23351Medium· 4.9github.com/pires/go-proxyproto denial of service vulnerability
github.com/pires/go-proxyproto denial of service vulnerability
CVE-2021-29499High· 7.5Predictable SIF UUID Identifiers in github.com/sylabs/sif
Predictable SIF UUID Identifiers in github.com/sylabs/sif
CVE-2020-28483NoneInconsistent interpretation of HTTP Requests in github.com/gin-gonic/gin
Inconsistent interpretation of HTTP Requests in github.com/gin-gonic/gin
CVE-2020-27534Medium· 5.3moby/buildkit: calls os.OpenFile with a potentially unsafe qemu-check temporary pathname (CVE-2020-27534)
A flaw was found in moby. Moby buildkit calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
CVE-2020-26160High· 7.5PoCjwt-go: access restriction bypass vulnerability (CVE-2020-26160)
A vulnerability was found in jwt-go where it is vulnerable to Access Restriction Bypass if m["aud"] happens to be []string{}, as allowed by the spec, the type assertion fails and the value of aud is "". This can cause audience verification…
CVE-2021-29482High· 7.5ulikunitz/xz: Infinite loop in readUvarint allows for denial of service (CVE-2021-29482)
A flaw was found in github.com/ulikunitz/xz. The function readUvarint may not terminate a loop what could lead to denial of service (DoS).
CVE-2020-14040High· 7.5golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)
A denial of service vulnerability was found in the golang.org/x/text library. A library or application must use one of the vulnerable functions, such as unicode.Transform, transform.String, or transform.Byte, to be susceptible to this vuln…