Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-7225-M954-23V7Highcosmossdk.io/math: ASA-2024-010: cosmossdk.io/math: Mismatched bit-length validation in sdk.Int and sdk.Dec can lead to panic CVE-2024-52280Highgithub.com/rancher/steve: github.com/rancher/steve's users can issue watch commands for arbitrary resources CVE-2024-52522Mediumgithub.com/rclone/rclone: Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata CVE-2024-0793Highk8s.io/kubernetes: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request CVE-2024-44625Highgogs.io/gogs: Remote Code Execution in Gogs CVE-2023-0109Mediumgithub.com/usememos/memos: Stored XSS using two files in usememos/memos CVE-2024-52308Highgithub.com/cli/cli/v2: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer CVE-2022-31668Highgithub.com/goharbor/harbor: Harbor fails to validate the user permissions when updating p2p preheat policies CVE-2024-52010Highgithub.com/tobychui/zoraxy: Zoraxy has an authenticated command injection in the Web SSH feature CVE-2024-52009Highgithub.com/runatlantis/atlantis: Git credentials are exposed in Atlantis logs CVE-2024-10975Mediumgithub.com/hashicorp/nomad: Hashicorp Nomad Incorrect Authorization vulnerability CVE-2024-45794Highgithub.com/devtron-labs/devtron: Devtron has SQL Injection in CreateUser API GHSA-P7MV-53F2-4CWJHighgithub.com/cometbft/cometbft: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data CVE-2024-51746Lowgithub.com/sigstore/gitsign: gitsign may use incorrect Rekor entries during verification CVE-2024-51735Criticalgithub.com/j3ssie/osmedeus: Osmedeus Web Server Vulnerable to Stored XSS, Leading to RCE CVE-2024-48057Lowgithub.com/mudler/LocalAI: LocalAI Cross-site Scripting vulnerability CVE-2024-51744Lowgithub.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations CVE-2024-10389Mediumgithub.com/google/safearchive: Safearchive Path Traversal vulnerability CVE-2024-49381Highgithub.com/plentico/plenti: Plenti arbitrary file deletion vulnerability CVE-2024-49380Highgithub.com/plentico/plenti: Plenti arbitrary file write vulnerability CVE-2024-39720Highgithub.com/ollama/ollama: Ollama Out-of-bounds Read CVE-2024-50354Mediumgithub.com/consensys/gnark: Gnark out-of-memory during deserialization with crafted inputs CVE-2024-8185Highgithub.com/hashicorp/vault: Hashicorp Vault vulnerable to denial of service through memory exhaustion CVE-2024-10006Mediumgithub.com/hashicorp/consul: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability CVE-2024-10005Highgithub.com/hashicorp/consul: Hashicorp Consul Path Traversal vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.