Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-21498Mediumgithub.com/greenpau/caddy-security: Server-Side Request Forgery in github.com/greenpau/caddy-security CVE-2024-21492Mediumgithub.com/greenpau/caddy-security: Insufficient Session Expiration in github.com/greenpau/caddy-security CVE-2024-21493Mediumgithub.com/greenpau/caddy-security: Improper Validation of Array Index in github.com/greenpau/caddy-security CVE-2024-21494Mediumgithub.com/greenpau/caddy-security: Authentication Bypass by Spoofing in github.com/greenpau/caddy-security CVE-2024-21495Mediumgithub.com/greenpau/caddy-security: Use of Insufficiently Random Values in github.com/greenpau/caddy-security CVE-2024-21496Mediumgithub.com/greenpau/caddy-security: Cross-site Scripting in github.com/greenpau/caddy-security CVE-2024-25620Mediumhelm.sh/helm/v3: Helm dependency management path traversal CVE-2024-1485Mediumgithub.com/devfile/registry-support/registry-library: registry-support: decompress can delete files outside scope via relative paths CVE-2023-6152Mediumgithub.com/grafana/grafana: Email Validation Bypass And Preventing Sign Up From Email's Owner CVE-2023-52430Mediumgithub.com/greenpau/caddy-security: caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting CVE-2024-1402Mediumgithub.com/mattermost/mattermost/server/v8: Mattermost vulnerable to denial of service via large number of emoji reactions CVE-2024-24774Mediumgithub.com/mattermost/mattermost-plugin-jira: Mattermost Jira Plugin does not properly check security levels CVE-2024-24776Lowgithub.com/mattermost/mattermost/server/v8: Mattermost fails to check the required permissions CVE-2024-23319Lowgithub.com/mattermost/mattermost-plugin-jira: Mattermost Jira Plugin vulnerable to Cross-Site Request Forgery CVE-2024-1329Highgithub.com/hashicorp/nomad: HashiCorp Nomad vulnerable to symlink attacks CVE-2023-32192Highgithub.com/rancher/apiserver: Rancher API Server Cross-site Scripting Vulnerability CVE-2023-32193Highgithub.com/rancher/norman: Norman API Cross-site Scripting Vulnerability CVE-2023-22649Highgithub.com/rancher/rancher: Rancher 'Audit Log' leaks sensitive information CVE-2023-32194Highgithub.com/rancher/rancher: Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'CVE-2024-23448Highgithub.com/elastic/apm-server: APM Server vulnerable to Insertion of Sensitive Information into Log File CVE-2024-1052Highgithub.com/hashicorp/boundary: Boundary vulnerable to session hijacking through TLS certificate tampering CVE-2024-24768Lowgithub.com/1Panel-dev/1Panel: 1Panel set-cookie is missing the Secure keyword GHSA-VJG6-93FV-QV64Lowgo.etcd.io/etcd/v3: Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only GHSA-PM3M-32R3-7MFHLowgo.etcd.io/etcd/v3: Etcd embed auto compaction retention negative value causing a compaction loop or a crash GHSA-J86V-2VJR-FG8FMediumgo.etcd.io/etcd/v3: Etcd Gateway TLS endpoint validation only confirms TCP reachability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo