Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Grafana XSS in Dashboard Text Panel CVE-2018-18623, GHSA-cmq2-j8v8-2q44, GO-2022-0342 | Medium | 1.8% | 02 Jun, 2020 | Go github.com/grafana/grafana |
InfluxDB Reflected Cross-site Scripting CVE-2018-17572, GHSA-w55x-q3gv-px85 | Medium | 0.7% | 02 Mar, 2020 | Go github.com/influxdata/influxdb |
Request smuggling due to improper header parsing in net/http CVE-2015-5739, CVE-2015-5740, CVE-2015-5741, GO-2021-0159 | Critical | 9.6% | 08 Feb, 2020 | Go stdlib |
Certificate validation bypass on Windows in crypto/x509 BIT-golang-2020-0601, CVE-2020-0601, GO-2022-0535 | HighExploited | 89.1% | 14 Jan, 2020 | Go stdlib |
Kubernetes ingress exposes sensitive information CVE-2018-1002104, GHSA-p3x5-5xpx-9phm | Medium | 1.1% | 14 Jan, 2020 | Go k8s.io/ingress-nginx |
Path Traversal in Docker CVE-2014-9356, GHSA-vj3f-3286-r4pf, GO-2022-0751 | High | 4.9% | 02 Dec, 2019 | Go github.com/docker/docker |
glot-code-runner RCE CVE-2018-15747, GHSA-vj95-2f9q-x7h6 | Critical | 3.6% | 21 Jun, 2019 | Go github.com/prasmussen/glot-code-runner |
Improper Input Validation in libseccomp-golang CVE-2017-18367, GHSA-58v3-j75h-xr49, GO-2020-0007 | High | 2.4% | 24 Apr, 2019 | Go github.com/seccomp/libseccomp-golang |
LXD vulnerable to Race Condition CVE-2015-1340, GHSA-8mpq-fmr3-6jxv, GO-2021-0071 | High | 0.9% | 22 Apr, 2019 | Go github.com/lxc/lxd |
miekg/dns parsing error leads to nil pointer dereference and DoS CVE-2018-17419, GHSA-9jcx-pr2f-qvq5, GO-2020-0028 | High | 1.8% | 07 Mar, 2019 | Go github.com/miekg/dns |
go.etcd.io/etcd Authentication Bypass CVE-2018-16886, GHSA-h6xx-pmxh-3wgp, GO-2021-0077 | High | 4.1% | 14 Jan, 2019 | Go go.etcd.io/etcd Go go.etcd.io/etcd/v3 |
Grafana XSS Vulnerability CVE-2018-1000816, GHSA-x5fh-fvvr-892f | Medium | 0.7% | 20 Dec, 2018 | Go github.com/grafana/grafana |
Pivotal Concourse Open Redirect in Login Flow CVE-2018-15798, GHSA-9689-rx4v-cqgc | Medium | 1.1% | 19 Dec, 2018 | Go github.com/concourse/concourse |
Sylabs Singularity Improper Input Validation CVE-2018-19295, GHSA-p83v-8vmr-qfv9 | High | 0.5% | 17 Dec, 2018 | Go github.com/sylabs/singularity |
Denial of service in chain verification in crypto/x509 CVE-2018-16875, GO-2022-0191 | High | 6.5% | 14 Dec, 2018 | Go stdlib |
Directory traversal via "go get" command in cmd/go CVE-2018-16874, GO-2022-0190 | High | 5.0% | 14 Dec, 2018 | Go toolchain |
Remote command execution via "go get" with "-u" flag in cmd/go CVE-2018-16873, GO-2022-0189 | High | 66.3% | 14 Dec, 2018 | Go toolchain |
Privilege Escalation in Kubernetes CVE-2018-1002105, GHSA-579h-mv94-g4gp, GO-2022-0792 | Critical | 87.0% | 05 Dec, 2018 | Go github.com/kubernetes/kubernetes |
Minikube RCE via DNS Rebinding CVE-2018-1002103, GHSA-6pcv-qqx4-mxm3, GO-2023-1961 | High | 0.7% | 05 Dec, 2018 | Go k8s.io/minikube |
Kubernetes Arbitrary Command Injection CVE-2018-1002101, GHSA-wqwf-x5cj-rg56, GO-2022-0886 | Critical | 4.0% | 05 Dec, 2018 | Go k8s.io/kubernetes |
Go Ethereum Denial of Service CVE-2018-19184, GHSA-9h4h-8w5p-f28w, GO-2022-0814 | High | 1.5% | 12 Nov, 2018 | Go github.com/ethereum/go-ethereum |
Caddy allows enumeration of Certificates and Hostnames CVE-2018-19148, GHSA-jf2w-mq6r-56v8 | Low | 0.9% | 10 Nov, 2018 | Go github.com/caddyserver/caddy |
Gitea Remote Code Execution (RCE) CVE-2018-18926, GHSA-hf6f-jq25-8gq9, GO-2022-0844 | Critical | 3.0% | 04 Nov, 2018 | Go code.gitea.io/gitea |
Denial of Service in Bytom CVE-2018-18206, GHSA-vc3x-gx6c-g99f, GO-2021-0079 | High | 1.4% | 10 Oct, 2018 | Go github.com/bytom/bytom |
Gitea Exposes Private Email Addresses CVE-2018-1000803, GHSA-f5fj-7265-jxhj, GO-2022-0823 | Medium | 1.4% | 08 Oct, 2018 | Go github.com/go-gitea/gitea |
golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer CVE-2018-17847, CVE-2018-17848, GHSA-4r78-hx75-jjj2, GHSA-mv93-wvcp-7m7r, GO-2022-0197 | High | 2.4% | 01 Oct, 2018 | Go golang.org/x/net |
x/net/html Vulnerable to DoS During HTML Parsing CVE-2018-17846, GHSA-vfw5-hrgq-h5wf, GO-2020-0014 | High | 2.5% | 01 Oct, 2018 | Go golang.org/x/net |
golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer CVE-2018-17143, GHSA-fcf9-6fv2-fc5v, GO-2022-0193 | High | 2.8% | 17 Sep, 2018 | Go golang.org/x/net |
golang.org/x/net/html NULL Pointer Dereference vulnerability CVE-2018-17142, GHSA-2wp2-chmh-r934, GO-2022-0192 | High | 2.4% | 17 Sep, 2018 | Go golang.org/x/net |
golang.org/x/net/html NULL Pointer Dereference vulnerability CVE-2018-17075, GHSA-5p4h-3377-7w67, GO-2021-0078 | High | 2.8% | 16 Sep, 2018 | Go golang.org/x/net |
Gogs XSS Vulnerability CVE-2018-17031, GHSA-px5r-fqj6-r2f8, GO-2023-1972 | Medium | 0.9% | 14 Sep, 2018 | Go gogs.io/gogs |
Docker Authentication Bypass CVE-2018-12608, GHSA-qrqr-3x5j-2xw9 | High | 0.9% | 10 Sep, 2018 | Go github.com/docker/docker |
Go Ethereum Improper Input Validation CVE-2018-16733, GHSA-qr2j-wrhx-4829, GO-2022-0871 | High | 1.2% | 08 Sep, 2018 | Go github.com/ethereum/go-ethereum |
JSON-Patch Out-of-bounds Write vulnerability CVE-2018-14632, GHSA-gxhv-3hwf-wjp9, GO-2021-0076 | High | 2.2% | 06 Sep, 2018 | Go github.com/evanphx/json-patch |
Grafana Authentication Bypass CVE-2018-15727, GHSA-rgjg-66cx-5x9m, GO-2022-0707 | Critical | 63.1% | 29 Aug, 2018 | Go github.com/grafana/grafana |
Traefik Missing Authentication CVE-2018-15598, GHSA-2cjc-rgmp-x649, GO-2023-1950 | High | 2.9% | 21 Aug, 2018 | Go github.com/traefik/traefik |
Gogs and Gitea SSRF Vulnerability CVE-2018-15192, GHSA-fg3x-rwq9-74cw, GO-2023-1971 | High | 2.1% | 08 Aug, 2018 | Go code.gitea.io/gitea Go gogs.io/gogs |
Open Redirect CVE-2018-15178, GHSA-cpgw-2wxr-pww3, GO-2022-0822 | Medium | 1.3% | 08 Aug, 2018 | Go gogs.io/gogs |
Arbitrary File Write via Archive Extraction in mholt/archiver CVE-2018-1002207, GHSA-5wmg-j84w-4jj4, GO-2022-0799, SNYK-GOLANG-GITHUBCOMMHOLTARCHIVERCMDARCHIVER-50071 | Medium | 2.5% | 25 Jul, 2018 | Go github.com/mholt/archiver |
Singularity Incorrect Access Control CVE-2018-12021, GHSA-4x32-h296-rg6j | Medium | 1.5% | 05 Jul, 2018 | Go github.com/hpcng/singularity |
Go Ethereum LES protocol implementation vulnerable to Denial of Service CVE-2018-12018, GHSA-p5gc-957x-gfw9, GO-2021-0075 | High | 4.3% | 05 Jul, 2018 | Go github.com/ethereum/go-ethereum |
Podman Elevated Container Privileges CVE-2018-10856, GHSA-wp7w-vx86-vj9h, GO-2023-1962 | High | 0.9% | 03 Jul, 2018 | Go github.com/containers/podman Go github.com/containers/podman/v2 Go github.com/containers/podman/v3 Go github.com/containers/podman/v4 |
Openshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) CVE-2018-1103, GHSA-w55j-f7vx-6q37, GO-2020-0026 | Medium | 1.3% | 12 Jun, 2018 | Go github.com/openshift/source-to-image |
Grafana Cross-site Scripting (XSS) CVE-2018-12099, GHSA-v5gq-qvjq-8p53, GO-2024-2510 | Medium | 2.1% | 11 Jun, 2018 | Go github.com/grafana/grafana |
Kubernetes arbitrary file overwrite CVE-2018-1002100, GHSA-2jq6-ffph-p4h8, GO-2023-1959 | Medium | 1.7% | 02 Jun, 2018 | Go k8s.io/kubernetes |
DNS Rebinding in etcd CVE-2018-1099, GHSA-wf43-55jj-vwq8 | Medium | 0.5% | 03 Apr, 2018 | Go go.etcd.io/etcd |
etcd Cross-site Request Forgery (CSRF) CVE-2018-1098, GHSA-5gjm-fj42-x983 | High | 1.2% | 03 Apr, 2018 | Go go.etcd.io/etcd/v3 |
Docker Notary Signature Algorithm Not Matched to Key vulnerability CVE-2015-9258, GHSA-785h-hrf7-gqxc | High | 1.0% | 31 Mar, 2018 | Go github.com/docker/notary |
Kubernetes arbitrary file overwrite CVE-2017-1002102, GHSA-mm7g-f2gg-cw8g, GO-2023-1977 | Medium | 1.1% | 13 Mar, 2018 | Go k8s.io/kubernetes |
Apache Thrift Go Library Command Injection CVE-2016-5397, GHSA-r4m4-pmvw-m6j5 | High | 6.9% | 12 Feb, 2018 | Go github.com/apache/thrift |