Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Gogs vulnerable to a bypass of CVE-2024-55947 CVE-2025-8110, GHSA-mq8m-42gh-wq7r, GO-2025-4225 | HighExploited | 85.2% | 10 Dec, 2025 | Go gogs.io/gogs |
HTTP/2 Stream Cancellation Attack BIT-apisix-2023-44487, BIT-aspnet-core-2023-44487, BIT-contour-2023-44487, BIT-dotnet-2023-44487, BIT-dotnet-sdk-2023-44487, BIT-envoy-2023-44487, BIT-golang-2023-44487, BIT-jenkins-2023-44487, BIT-kong-2023-44487, BIT-nginx-2023-44487, BIT-nginx-gateway-2023-44487, BIT-node-2023-44487, BIT-node-min-2023-44487, BIT-solr-2023-44487, BIT-tomcat-2023-44487, BIT-varnish-2023-44487, CVE-2023-44487, GHSA-qppj-fm5r-hxr3 | HighExploited | 100.0% | 10 Oct, 2023 | Go golang.org/x/net Maven com.typesafe.akka:akka-http-core Maven com.typesafe.akka:akka-http-core_2.11 Maven com.typesafe.akka:akka-http-core_2.12 +8 more |
libwebp: OOB write in BuildHuffmanTable A-299477569, ASB-A-299477569, CVE-2023-4863, CVE-2023-5129, GHSA-j7hp-h8jx-5ppr, PYSEC-2026-1794, RUSTSEC-2023-0060, RUSTSEC-2023-0061 | HighExploited | 100.0% | 12 Sep, 2023 | Go github.com/chai2010/webp NuGet SkiaSharp NuGet magick.net-q16-anycpu NuGet magick.net-q16-hdri-anycpu +10 more |
Privilege Escalation on Linux/MacOS CVE-2023-28434, GHSA-2pxw-r47w-4p8c | HighExploited | 7.9% | 22 Mar, 2023 | Go github.com/minio/minio |
Grafana path traversal BIT-grafana-2021-43798, CVE-2021-43798, GHSA-8pjx-jj86-j47p | HighExploited | 88.5% | 07 Dec, 2021 | Go github.com/grafana/grafana |
Authentication bypass for viewing and deletions of snapshots BIT-grafana-2021-39226, CVE-2021-39226, GHSA-69j6-29vr-p3j9 | HighExploited | 99.9% | 05 Oct, 2021 | Go github.com/grafana/grafana |
Certificate validation bypass on Windows in crypto/x509 BIT-golang-2020-0601, CVE-2020-0601, GO-2022-0535 | HighExploited | 89.1% | 14 Jan, 2020 | Go stdlib |