Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-0290Mediumwww.velocidex.com/golang/velociraptor: Velociraptor subject to Path Traversal CVE-2023-0242Highwww.velocidex.com/golang/velociraptor: Velociraptor vulnerable to Missing Authorization CVE-2022-41721Highgolang.org/x/net: golang.org/x/net/http2/h2c vulnerable to request smuggling attack CVE-2023-0247Highgithub.com/bits-and-blooms/bloom: Bloom Uncontrolled Search Path Element vulnerability CVE-2023-22492Mediumgithub.com/zitadel/zitadel: Zitadel RefreshToken invalidation vulnerability GHSA-3244-8MFF-W398Mediumgithub.com/gotify/server: Reflected XSS in Gotify's /docs via import of outdated Swagger UI CVE-2023-22480Highgithub.com/KubeOperator/KubeOperator: KubeOperator allows unauthorized access to system API CVE-2023-22479Highgithub.com/KubeOperator/kubepi: KubePi session fixation attack allows an attacker to hijack a legitimate user session.CVE-2023-22478Highgithub.com/KubeOperator/kubepi: KubePi may allow unauthorized access to system API CVE-2022-23509Highgithub.com/weaveworks/weave-gitops: Gitops Run insecure communication CVE-2022-23508Highgithub.com/weaveworks/weave-gitops: GitOps Run allows for Kubernetes workload injection CVE-2020-36645Criticalgithub.com/square/squalor: Squalor SQL Injection vulnerability CVE-2014-125064Criticalgithub.com/elgs/gosqljson: gosqljson SQL Injection vulnerability CVE-2014-125055Mediumgithub.com/agnivade/easy-scrypt: easy-scrypt Observable Timing Discrepancy vulnerability CVE-2023-0107Mediumgithub.com/usememos/memos: usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0106Mediumgithub.com/usememos/memos: usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0108Mediumgithub.com/usememos/memos: usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0110Mediumgithub.com/usememos/memos: usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0111Mediumgithub.com/usememos/memos: usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0112Mediumgithub.com/usememos/memos: usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-22463Criticalgithub.com/KubeOperator/kubepi: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys CVE-2023-22460Mediumgithub.com/ipld/go-ipld-prime: go-ipld-prime/codec/json may panic if asked to encode bytes CVE-2022-4865Criticalgithub.com/usememos/memos: usememos/memos Cross-site Scripting vulnerability CVE-2022-4866Criticalgithub.com/usememos/memos: usememos/memos vulnerable to Cross-site Scripting CVE-2022-48195Criticalmellium.im/sasl: mellium.im/sasl authentication failure due to insufficient nonce randomness

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo