Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-33194Highgolang.org/x/net: golang.org/x/net/html Infinite Loop vulnerability CVE-2020-25864Mediumgithub.com/hashicorp/consul: HashiCorp Consul Cross-site Scripting vulnerability CVE-2020-7924Mediumgithub.com/mongodb/mongo-tools: MongoDB Tools Improper Certificate Validation vulnerability CVE-2021-25313Mediumgithub.com/rancher/rancher: Rancher Cross-site Scripting Vulnerability CVE-2020-8567Lowgithub.com/hashicorp/vault-csi-provider: Kubernetes Secrets Store CSI Driver plugins arbitrary file write CVE-2020-29245Mediumgithub.com/dhowden/tag: dhowden tag panic due to out-of-bounds read CVE-2020-29244Mediumgithub.com/dhowden/tag: dhowden tag panic due to out-of-bounds read CVE-2020-29243Mediumgithub.com/dhowden/tag: dhowden tag panic due to out-of-bounds read CVE-2022-29162Mediumgithub.com/opencontainers/runc: Default inheritable capabilities for linux container should be empty CVE-2020-10763Mediumgithub.com/heketi/heketi: Heketi logs sensitive information CVE-2020-24303Mediumgithub.com/grafana/grafana: Grafana XSS via a query alias for the ElasticSearch datasource CVE-2020-24710Mediumgithub.com/gophish/gophish: Gophish vulnerable to Server-Side Request Forgery CVE-2020-8553Mediumk8s.io/ingress-nginx: ingress-nginx component for Kubernetes allows file overwrite CVE-2020-11110Mediumgithub.com/grafana/grafana: Grafana stored XSS CVE-2020-15391Criticalgithub.com/loft-sh/devspace: DevSpace vulnerable to remote code execution CVE-2020-14457Mediumgithub.com/mattermost/mattermost-server/v5: Mattermost Server Sensitive Data Exposure CVE-2018-21258Highgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command CVE-2017-18917Highgithub.com/mattermost/mattermost-server: Mattermost Server uses weak hashing for OAuth, email verification tokens and invitations CVE-2017-18915Criticalgithub.com/mattermost/mattermost-server: Mattermost Server server restarts may provide attackers with API access CVE-2017-18918Mediumgithub.com/mattermost/mattermost-server: Mattermost Server does not restrict SAML certificate path for System Administrators CVE-2017-18916Mediumgithub.com/mattermost/mattermost-server: Mattermost Server has Improper Authorization for Integration Requests CVE-2017-18911Criticalgithub.com/mattermost/mattermost-server: Mattermost Server has X.509 Improper Certificate Validation CVE-2017-18912Highgithub.com/mattermost/mattermost-server: Mattermost Server allows an attacker to specify a full pathname of a log file CVE-2017-18909Highgithub.com/mattermost/mattermost-server: Mattermost Server SAML implementation does not require encryption or signature verification as default CVE-2017-18902Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes team invite IDs through API endpoints

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo