Open Source Vulnerabilities

gopkg.in/macaron.v1

Open redirect in gopkg.in/macaron.v1

github.com/shiyanhui/dht

Uncontrolled Resource Consumption in github.com/shiyanhui/dht

github.com/unknwon/cae

Path Traversal in github.com/unknwon/cae

github.com/mholt/caddy

Authentication bypass in github.com/mholt/caddy

github.com/dinever/golf

Cryptographically weak random number generation in github.com/dinever/golf

github.com/RobotsAndPencils/go-saml

Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml

github.com/antchfx/xmlquery

Denial of service in github.com/antchfx/xmlquery

github.com/justinas/nosurf

Improper input validation in github.com/justinas/nosurf

github.com/labstack/echo/v4

Directory traversal on Windows in github.com/labstack/echo/v4

github.com/tidwall/gjson

Panic due to improper input validation in ForEach in github.com/tidwall/gjson

github.com/buger/jsonparser

Panic due to improper input validation in github.com/buger/jsonparser

github.com/crewjam/saml

Signature validation bypass due to XML processing error in github.com/crewjam/saml

github.com/tidwall/gjson

Panic due to improper input validation in Get in github.com/tidwall/gjson

github.com/ethereum/go-ethereum

Nil pointer dereference via malicious RPC message in github.com/ethereum/go-ethereum

stdlib

Panic when opening archives in archive/zip

toolchain

Arbitrary code injection via the go command with cgo on Windows in cmd/go

stdlib

Panic during division of very large numbers in math/big

github.com/lxc/lxd

Race condition in github.com/lxc/lxd

github.com/docker/distribution

Uncontrolled resource allocation in github.com/docker/distribution

github.com/git-lfs/git-lfs

Arbitrary command execution in github.com/git-lfs/git-lfs

github.com/ethereum/go-ethereum

Panic due to improper validation of RPC messages in github.com/ethereum/go-ethereum

github.com/evanphx/json-patch

Out-of-bounds write in github.com/evanphx/json-patch

golang.org/x/net

Panic when parsing malformed HTML in golang.org/x/net/html

github.com/bytom/bytom

Panic in github.com/bytom/bytom

github.com/containers/image

Insufficiently Protected Credentials in github.com/containers/image

github.com/hybridgroup/gobot

Improper certificate validation in github.com/hybridgroup/gobot

github.com/astaxie/beego

Incorrect permissions for critical resource in github.com/astaxie/beego

github.com/documize/community

Cross-site scripting in github.com/documize/community

github.com/buger/jsonparser

Infinite loop in github.com/buger/jsonparser

github.com/tendermint/tendermint

Denial of service in github.com/tendermint/tendermint

github.com/gofiber/fiber

github.com/ory/fosite

github.com/hashicorp/go-slug

Directory traversal in github.com/hashicorp/go-slug

github.com/google/go-tpm

Sensitive information exposure in github.com/google/go-tpm

github.com/proglottis/gpgme

Memory corruption or code execution in github.com/proglottis/gpgme

github.com/dhowden/tag

Panic due to out-of-bounds read in github.com/dhowden/tag

github.com/git-lfs/git-lfs

Arbitrary code execution on Windows in github.com/git-lfs/git-lfs

github.com/deislabs/oras

Zip slip directory exploit in github.com/deislabs/oras

django-debug-toolbar