Open Source Vulnerabilities

go.etcd.io/etcd

Authentication bypass in go.etcd.io/etcd

github.com/opencontainers/runc

Privilege escalation in github.com/opencontainers/runc

k8s.io/kubernetes

Sensitive information leak via log file in k8s.io/kubernetes

k8s.io/client-go

Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go

k8s.io/client-go

Unauthorized credential disclosure via debug logs in k8s.io/kubernetes and k8s.io/client-go

gopkg.in/yaml.v2, github.com/go-yaml/yaml

Denial of service in gopkg.in/yaml.v2

github.com/russellhaering/gosaml2

Authentication bypass in github.com/russellhaering/gosaml2

github.com/gogo/protobuf

Panic due to improper input validation in github.com/gogo/protobuf

github.com/gin-gonic/gin

Inconsistent interpretation of HTTP Requests in github.com/gin-gonic/gin

github.com/russellhaering/goxmldsig

XML digital signature validation bypass in github.com/russellhaering/goxmldsig

github.com/russellhaering/goxmldsig, github.com/russellhaering/gosaml2

Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig

github.com/sassoftware/go-rpmutils

Arbitrary File Write via Archive Extraction (Zip Slip) in github.com/sassoftware/go-rpmutils

gopkg.in/yaml.v2, github.com/go-yaml/yaml

Excessive resource consumption in YAML parsing in gopkg.in/yaml.v2

golang.org/x/text

Infinite loop when decoding some inputs in golang.org/x/text

golang.org/x/crypto

Panic due to improper verification of cryptographic signatures in golang.org/x/crypto/ssh

go.etcd.io/etcd

Panic due to malformed WALs in go.etcd.io/etcd

github.com/dgrijalva/jwt-go, github.com/dgrijalva/jwt-go/v4

Authorization bypass in github.com/dgrijalva/jwt-go

github.com/dexidp/dex/connector/saml

github.com/square/go-jose

github.com/gin-gonic/gin

Arbitrary log line injection in github.com/gin-gonic/gin

github.com/proglottis/gpgme

github.com/revel/revel

Resource exhaustion in github.com/revel/revel

github.com/nanobox-io/golang-nanoauth

Authentication bypass in github.com/nanobox-io/golang-nanoauth

github.com/miekg/dns

Denial of service via open idle connection in github.com/miekg/dns

github.com/seccomp/libseccomp-golang

Improper input validation in github.com/seccomp/libseccomp-golang

github.com/miekg/dns

Insecure generation of random numbers in github.com/miekg/dns

github.com/square/go-jose

Integer overflow in github.com/square/go-jose

github.com/square/go-jose

Elliptic curve key disclosure in github.com/square/go-jose

golang.org/x/crypto

Man-in-the-middle attack in golang.org/x/crypto/ssh

golang.org/x/net

Infinite loop due to improper handling of "select" tags in golang.org/x/net/html

github.com/ulikunitz/xz

Infinite loop in github.com/ulikunitz/xz

github.com/satori/go.uuid

github.com/gorilla/websocket

Integer overflow in github.com/gorilla/websocket

github.com/gorilla/handlers

Improper access control in github.com/gorilla/handlers

github.com/gogits/gogs

SQL Injection in github.com/gogits/gogs

github.com/cloudflare/golz4

Out-of-bounds write in github.com/cloudflare/golz4

github.com/robbert229/jwt

Timing side-channel in github.com/robbert229/jwt

github.com/btcsuite/go-socks, github.com/btcsuitereleases/go-socks

Infinite loop in github.com/btcsuite/go-socks

code.cloudfoundry.org/archiver

Path traversal in code.cloudfoundry.org/archiver

github.com/openshift/source-to-image

Arbitrary file write via archive extraction in github.com/openshift/source-to-image

aahframe.work

Path Traversal in aahframe.work

github.com/google/fscrypt

Privilege escalation in github.com/google/fscrypt

github.com/miekg/dns

Denial of service via malformed zone file in github.com/miekg/dns

github.com/gin-gonic/gin

github.com/proglottis/gpgme

github.com/goadesign/goa, goa.design/goa, goa.design/goa/v3

Path traversal in github.com/goadesign/goa

github.com/artdarek/go-unzip

Path traversal in github.com/artdarek/go-unzip

github.com/yi-ge/unzip

Path traversal in github.com/yi-ge/unzip

github.com/tendermint/tendermint

Uncontrolled resource consumption in github.com/tendermint/tendermint

github.com/pion/dtls

Improper authentication in github.com/pion/dtls