Open Source Vulnerabilities

github.com/flynn/noise

flynn/noise has improper nonce handling yielding potential state DoS

github.com/appc/docker2aci

Denial of Service in docker2aci

github.com/grafana/grafana

Denial of service in Grafana

code.gitea.io/gitea

Gitea Remote Code Execution (RCE)

github.com/go-gitea/gitea

Gitea Remote Code Execution

github.com/kubernetes-csi/external-snapshotter/v2, github.com/kubernetes-csi/external-snapshotter/v3

NULL Pointer Dereference in Kubernetes CSI snapshot-controller

github.com/kubernetes/kubernetes, k8s.io/kubernetes

Directory Traversal in Kubernetes

github.com/hashicorp/consul, github.com/hashicorp/consul

Denial of Service (DoS) in HashiCorp Consul

github.com/go-gitea/gitea

Gitea Improper Input Validation

github.com/heketi/heketi

Information Exposure in Heketi

github.com/grafana/grafana, github.com/grafana/grafana

Grafana Authentication Bypass

github.com/docker/docker

Arbitrary File Override in Docker Engine

github.com/bytom/bytom

Denial of Service in Bytom

github.com/elastic/cloud-on-k8s

Cryptographic Issues in ECK

org.postgresql:postgresql

Use of a Broken or Risky Cryptographic Algorithm in PostgreSQL

github.com/grafana/grafana, github.com/grafana/grafana

Server Side Request Forgery in Grafana

k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

Improper Authentication in Kubernetes

github.com/go-ldap/ldap

Access Restriction Bypass in go-ldap

github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint

org.postgresql:postgresql

SQL Injection

github.com/flynn/noise

Weak encryption and denial of service in github.com/flynn/noise

sigs.k8s.io/secrets-store-csi-driver

Directory traversal in sigs.k8s.io/secrets-store-csi-driver

github.com/elastic/beats

Denial of service in github.com/elastic/beats

k8s.io/kubernetes

Directory traversal in k8s.io/kubernetes

github.com/kongchuanhujiao/server

Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server

github.com/projectcalico/calico, github.com/projectcalico/calico, github.com/projectcalico/calico, github.com/projectcalico/calico, github.com/projectcalico/calico, github.com/projectcalico/calico, github.com/projectcalico/calico

Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information Into Sent Data in Calico

k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes

nemo-toolkit

Arbitrary file deletion in NeMo ASR webapp

github.com/prometheus/prometheus, github.com/prometheus/prometheus

Arbitrary redirects under /new endpoint

org.wildfly.security:wildfly-elytron

Session Fixation in WildFly Elytron

org.wildfly.security:wildfly-elytron

Incorrect Authorization in WildFly Elytron

org.wildfly:wildfly-parent

Wildfly logs plaintext passwords

xerces:xercesImpl

Improper Input Validation in Xerces

github.com/docker/docker

Symlink Attack in Libcontainer and Docker Engine

github.com/opencontainers/umoci

Improper input validation in umoci

mercurial

Mercurial Path Traversal/Link Following vulnerability

github.com/github/hub, hub

Hub Package Arbitrary File Overwrite

github.com/nats-io/jwt, github.com/nats-io/jwt/v2

nats-io/jwt not enforcing checking of Import token permissions

github.com/docker/docker

Directory Traversal in Docker

github.com/docker/docker

Arbitrary Code Execution in Docker

github.com/docker/docker

Privilege Escalation in Docker

github.com/go-gitea/gitea

Denial of Service in Gitea

github.com/deislabs/oras

Zip slip directory exploit in github.com/deislabs/oras

github.com/git-lfs/git-lfs

Git LFS can execute a Git binary from the current directory on Windows

github.com/go-vela/compiler

Exposure of server configuration in github.com/go-vela/server

impresscms/impresscms

Path Traversal in ImpressCMS

librenms/librenms

Cross-site Scripting in librenms

librenms/librenms

Cross-site Scripting in librenms