Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-34927Mediumgithub.com/casdoor/casdoor: Casdoor Cross-Site Request Forgery vulnerability CVE-2023-34758Criticalgithub.com/bishopfox/sliver: Silver vulnerable to MitM attack against implants due to a cryptography vulnerability CVE-2023-35163Mediumcode.vegaprotocol.io/vega: Vega's validators able to submit duplicate transactions CVE-2023-34242Lowgithub.com/cilium/cilium: Cilium vulnerable to information leakage via incorrect ReferenceGrant handling CVE-2023-2783Mediumgithub.com/mattermost/mattermost-server/v6: Mattermost Server Missing Authorization vulnerability CVE-2023-2431Mediumk8s.io/kubernetes: Kubelet vulnerable to bypass of seccomp profile enforcement GHSA-RM8V-MXJ3-5RMQMediumgithub.com/lestrrat-go/jwx/v2: github.com/lestrrat-go/jwx vulnerable to Potential Padding Oracle Attack CVE-2023-34620Highorg.hjson:hjson: hjson stack exhaustion vulnerability CVE-2023-2183Mediumgithub.com/grafana/grafana: Grafana has Broken Access Control in Alert manager: Viewer can send test alerts GHSA-8QXH-2GH8-R923Highgithub.com/cheqd/cheqd-node: cheqd-node subject to Cosmos SDK "Barberry" vulnerability CVE-2019-12291Highgithub.com/hashicorp/consul: HashiCorp Consul Incorrect Access Control vulnerability CVE-2023-34231Highgithub.com/snowflakedb/gosnowflake: Snowflake Golang Driver vulnerable to Command Injection CVE-2023-2121Mediumgithub.com/hashicorp/vault: Hashicorp Vault vulnerable to Cross-site Scripting CVE-2023-33498Highgithub.com/alist-org/alist/v3: alist Incorrect Access Control vulnerability CVE-2023-2801Highgithub.com/grafana/grafana: Grafana Missing Synchronization vulnerability CVE-2023-33959Highgithub.com/notaryproject/notation-go: notation-go's verification bypass can cause users to verify the wrong artifact CVE-2023-33958Mediumgithub.com/notaryproject/notation: Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack CVE-2023-33957Mediumgithub.com/notaryproject/notation: Notation vulnerable to denial of service from high number of artifact signatures CVE-2022-46165Mediumgithub.com/syncthing/syncthing: syncthing vulnerable to Cross-site Scripting (XSS) in Web GUI CVE-2023-22647Criticalgithub.com/rancher/rancher: Rancher vulnerable to Privilege Escalation via manipulation of Secrets CVE-2022-43760Mediumgithub.com/rancher/rancher: Rancher UI has multiple Cross-Site Scripting (XSS) issues CVE-2020-10676Highgithub.com/rancher/rancher: Rancher users retain access after moving namespaces into projects they don't have access to CVE-2023-33967Highgithub.com/megaease/easeprobe: SQL injection when using MySQL/PostgreSQL data checking CVE-2023-33965Criticalgithub.com/txthinking/brook: Brook's tproxy server is vulnerable to a drive-by command injection.GHSA-7C94-GVVJ-R3MGLowgithub.com/cheqd/cheqd-node: cheqd-node affected by Inter-blockchain Communication (IBC) protocol "Huckleberry" vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo