Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-16250Highgithub.com/hashicorp/vault: Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault CVE-2020-7955Mediumgithub.com/hashicorp/consul: Incorrect Authorization in HashiCorp Consul CVE-2020-7220Highgithub.com/hashicorp/vault: Improper Resource Shutdown or Release in HashiCorp Vault CVE-2021-23409Highgithub.com/pires/go-proxyproto: github.com/pires/go-proxyproto vulnerable to DoS via Connection descriptor exhaustion CVE-2020-8827Highgithub.com/argoproj/argo-cd: Improper Restriction of Excessive Authentication Attempts in Argo API CVE-2020-8828Highgithub.com/argoproj/argo-cd: Argo CD Insecure default administrative password CVE-2021-32760Mediumgithub.com/containerd/containerd: Archive package allows chmod of file outside of unpack target directory CVE-2021-36213Highgithub.com/hashicorp/consul: HashiCorp Consul L7 deny intention results in an allow action CVE-2021-32574Highgithub.com/hashicorp/consul: Hashicorp Consul Missing SSL Certificate Validation CVE-2021-3602Mediumgithub.com/containers/buildah: Buildah processes using chroot isolation may leak environment values to intermediate processes CVE-2021-32721Mediumgithub.com/AndrewBurian/powermux: Open Redirect in github.com/AndrewBurian/powermux CVE-2017-15133Highgithub.com/miekg/dns: Denial of Service in miekg-dns CVE-2019-20786Criticalgithub.com/pion/dtls: Improper Authenication in Pion DTLS CVE-2020-12118Highgithub.com/binance-chain/tss-lib: Incorrect Default Permissions in Binance tss-lib CVE-2021-33497Criticalgithub.com/dutchcoders/transfer.sh: Path Traversal in Dutchcoders transfer.sh CVE-2021-33496Mediumgithub.com/dutchcoders/transfer.sh: Cross-site scripting in Dutchcoders transfer.sh CVE-2020-15111Mediumgithub.com/gofiber/fiber: CRLF vulnerability in Fiber CVE-2018-19184Highgithub.com/ethereum/go-ethereum: Go Ethereum Denial of Service CVE-2020-26265Mediumgithub.com/ethereum/go-ethereum: Consensus flaw during block processing in github.com/ethereum/go-ethereum CVE-2020-26264Mediumgithub.com/ethereum/go-ethereum: Denial of service in github.com/ethereum/go-ethereum GHSA-M6GX-RHVJ-FH52Criticalgithub.com/ethereum/go-ethereum: Denial of service in go-ethereum due to CVE-2020-28362 CVE-2020-26242Mediumgithub.com/ethereum/go-ethereum: Denial of service in geth CVE-2020-26241Mediumgithub.com/ethereum/go-ethereum: Shallow copy bug in geth CVE-2020-26240Mediumgithub.com/ethereum/go-ethereum: Erroneous Proof of Work calculation in geth CVE-2014-8683Mediumgogs.io/gogs: Cross-site Scripting in Gogs

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo