Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Denial of Service in miekg-dns CVE-2017-15133, GHSA-p55x-7x9v-q8m4, GO-2020-0006 | High | 1.9% | 29 Jan, 2018 | Go github.com/miekg/dns |
Syncthing vulnerable to symlink traversal and arbitrary file overwrite CVE-2017-1000420, GHSA-28xp-g7f6-7mhf | High | 1.5% | 02 Jan, 2018 | Go github.com/syncthing/syncthing |
GitHub Git LFS Arbitrary command execution vulnerability CVE-2017-17831, GHSA-w4xh-w33p-4v29, GO-2021-0073 | High | 3.7% | 21 Dec, 2017 | Go github.com/git-lfs/git-lfs |
Information Exposure in Heketi CVE-2017-15104, GHSA-q9vw-wr57-xjv3, GO-2022-0866 | High | 0.4% | 18 Dec, 2017 | Go github.com/heketi/heketi |
Heketi Arbitrary Code Execution CVE-2017-15103, GHSA-6g56-v9qg-jp92, GO-2024-2763 | High | 5.5% | 18 Dec, 2017 | Go github.com/heketi/heketi |
Denial of Service in Packetbeat CVE-2017-11480, GHSA-9q3g-m353-cp4p, GO-2022-0643 | High | 1.4% | 08 Dec, 2017 | Go github.com/elastic/beats |
Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP) CVE-2017-16539, GHSA-vfjc-2qcw-j95j | Medium | 1.8% | 04 Nov, 2017 | Go github.com/moby/moby |
tar-split memory exhaustion CVE-2017-14992, GHSA-hqwh-8xv9-42hw, GO-2025-3640 | Medium | 2.5% | 01 Nov, 2017 | Go github.com/vbatts/tar-split |
Cleartext transmission of credentials in net/smtp CVE-2017-15042, GO-2021-0178 | Medium | 1.3% | 05 Oct, 2017 | Go stdlib |
Remote command execution via "go get" in cmd/go CVE-2017-15041, GO-2022-0177 | Critical | 8.9% | 05 Oct, 2017 | Go toolchain |
Denial of service when parsing large forms in mime/multipart CVE-2017-1000098, GO-2021-0172 | High | 2.1% | 05 Oct, 2017 | Go stdlib |
Mishandled trust preferences for root certificates on Darwin in crypto/x509 CVE-2017-1000097, GO-2022-0171 | High | 1.4% | 05 Oct, 2017 | Go stdlib |
protobuf susceptible to buffer overflow CVE-2015-5237, GHSA-jwvw-v7c5-m82h, PYSEC-2017-150, PYSEC-2017-65 | High | 5.0% | 25 Sep, 2017 | Go github.com/protocolbuffers/protobuf Maven com.google.protobuf:protobuf-parent NuGet Google.Protobuf Packagist google/protobuf +1 more |
Access Restriction Bypass in go-ldap CVE-2017-14623, GHSA-x27w-qxhg-343v, GO-2022-0887 | High | 1.7% | 20 Sep, 2017 | Go github.com/go-ldap/ldap |
Kubernetes in OpenShift3 Access Control Misconfiguration CVE-2015-7561, GHSA-2h9c-34v6-3qmr, GO-2023-1985 | Low | 1.4% | 07 Aug, 2017 | Go k8s.io/kubernetes |
Docker Registry has Allocation of Resources Without Limits or Throttling CVE-2017-11468, GHSA-h62f-wm92-2cmw, GO-2021-0072 | High | 3.2% | 20 Jul, 2017 | Go github.com/docker/distribution |
Open Redirect in oauth2_proxy CVE-2017-1000070, GHSA-jm34-xm8m-w958 | Medium | 1.0% | 17 Jul, 2017 | Go github.com/bitly/oauth2_proxy |
Cross-site Request Forgery (CSRF) CVE-2017-1000069, GHSA-rrm8-32g4-w8m3 | High | 0.7% | 17 Jul, 2017 | Go github.com/bitly/oauth2_proxy |
Kubernetes Privilege Escalation CVE-2017-1000056, GHSA-2jx2-76rc-2v7v, GO-2023-1492 | Critical | 2.8% | 17 Jul, 2017 | Go k8s.io/kubernetes |
Apache Traffic Control vulnerable to Slowloris-style Denial of Service attack CVE-2017-7670, GHSA-f2wr-c4c4-xjg7 | High | 4.7% | 10 Jul, 2017 | Go github.com/apache/trafficcontrol |
Incorrect computation for P-256 curves in crypto/elliptic CVE-2017-8932, GO-2022-0187 | Medium | 2.2% | 06 Jul, 2017 | Go stdlib |
Juju uses a UNIX domain socket without setting appropriate permissions CVE-2017-9232, GHSA-j3hp-pv6v-rgrx, GO-2025-3639 | Critical | 48.5% | 28 May, 2017 | Go github.com/juju/juju |
golang.org/x/crypto/ssh Man-in-the-Middle attack CVE-2017-3204, GHSA-xhjq-w7xm-p8qj, GO-2020-0013 | High | 3.2% | 04 Apr, 2017 | Go golang.org/x/crypto |
Rancher Access Control Vulnerability CVE-2017-7297, GHSA-w3x4-9854-95x8, GO-2023-1973 | High | 1.5% | 29 Mar, 2017 | Go github.com/rancher/rancher |
Integer Overflow in go-jose CVE-2016-9123, GHSA-3fx4-7f69-5mmg, GO-2020-0009 | High | 2.1% | 28 Mar, 2017 | Go github.com/square/go-jose |
Go JOSE Signature Validation Bypass CVE-2016-9122, GHSA-77gc-fj98-665h, GO-2022-0945 | High | 2.0% | 28 Mar, 2017 | Go gopkg.in/square/go-jose.v1 |
Elliptic Curve Key Disclosure in go-jose CVE-2016-9121, GHSA-86r9-39j9-99wp, GO-2020-0010 | Critical | 1.4% | 28 Mar, 2017 | Go github.com/square/go-jose Go gopkg.in/square/go-jose.v1 |
Information Exposure in RunC CVE-2016-9962, GHSA-gp4j-w3vj-7299, GO-2022-0835 | Medium | 0.4% | 31 Jan, 2017 | Go github.com/opencontainers/runc |
Denial of Service in docker2aci CVE-2016-8579, GHSA-gfh2-7jg5-653p, GO-2022-0833 | Medium | 0.4% | 28 Oct, 2016 | Go github.com/appc/docker2aci |
Improper input validation in net/http and net/http/cgi CVE-2016-5386, GO-2022-0761 | High | 5.2% | 19 Jul, 2016 | Go stdlib |
Privilege Elevation in runc CVE-2016-3697, GHSA-q3j5-32m5-58c2, GO-2021-0070 | High | 0.4% | 01 Jun, 2016 | Go github.com/opencontainers/runc |
Denial of service due to unchecked parameters in crypto/dsa CVE-2016-3959, GO-2022-0166 | High | 4.4% | 23 May, 2016 | Go stdlib |
Privilege escalation on Windows via malicious DLL in syscall CVE-2016-3958, GO-2021-0163 | High | 0.4% | 23 May, 2016 | Go stdlib |
Information Exposure in Kubernetes CVE-2015-7528, GHSA-mqf3-28j7-3mj6, GO-2022-0857 | Medium | 2.1% | 11 Apr, 2016 | Go github.com/kubernetes/kubernetes |
Authorization bypass in Openshift CVE-2016-1906, GHSA-m3fm-h5jp-q79p, GO-2022-0854 | Critical | 4.8% | 03 Feb, 2016 | Go github.com/openshift/origin |
Access Restriction Bypass in kubernetes CVE-2016-1905, GHSA-xx8c-m748-xr4j, GO-2022-0893 | High | 1.6% | 03 Feb, 2016 | Go github.com/kubernetes/kubernetes |
Incorrect calculation affecting RSA computations in math/big CVE-2015-8618, GO-2021-0160 | High | 2.6% | 27 Jan, 2016 | Go stdlib |
Directory Traversal in Kubernetes CVE-2015-5305, GHSA-jp32-vmm6-3vf5, GO-2022-0701 | Medium | 1.8% | 06 Nov, 2015 | Go github.com/kubernetes/kubernetes Go k8s.io/kubernetes |
Denial of Service in OpenShift Origin CVE-2015-5250, GHSA-rf3m-mhv7-x39f, GO-2022-0875 | Medium | 2.0% | 08 Sep, 2015 | Go github.com/openshift/origin |
Arbitrary File Override in Docker Engine CVE-2015-3631, GHSA-v4h8-794j-g8mm, GO-2022-0708 | Medium | 0.6% | 18 May, 2015 | Go github.com/docker/docker |
Information Exposure in Docker Engine CVE-2015-3630, GHSA-8fvr-5rqf-3wwh, GO-2022-0638 | High | 0.5% | 18 May, 2015 | Go github.com/docker/docker |
Arbitrary File Write in Libcontainer CVE-2015-3629, GHSA-g44j-7vp3-68cv, GO-2022-0647 | High | 0.6% | 18 May, 2015 | Go github.com/docker/docker |
Symlink Attack in Libcontainer and Docker Engine CVE-2015-3627, GHSA-g7v2-2qxx-wjrw, GO-2022-0649 | High | 0.6% | 18 May, 2015 | Go github.com/docker/docker |
Directory Traversal in Docker CVE-2014-9358, GHSA-qmmc-jppf-32wv, GO-2022-0705 | Medium | 2.5% | 16 Dec, 2014 | Go github.com/docker/docker |
Arbitrary Code Execution CVE-2014-9357, GHSA-997c-fj8j-rq5h, GO-2022-0640 | High | 6.2% | 16 Dec, 2014 | Go github.com/docker/docker |
Access Restriction Bypass in Docker CVE-2014-6408, GHSA-44gg-pmqr-4669, GO-2022-0625 | Medium | 3.1% | 12 Dec, 2014 | Go github.com/docker/docker |
Arbitrary Code Execution in Docker CVE-2014-6407, GHSA-5qgp-p5jc-w2rm, GO-2022-0630 | High | 4.9% | 12 Dec, 2014 | Go github.com/docker/docker |
Cross-site Scripting in Gogs CVE-2014-8683, GHSA-9hx4-qm7h-x84j, GO-2022-0642 | Medium | 1.9% | 21 Nov, 2014 | Go gogs.io/gogs |
SQL Injection in Gogs CVE-2014-8682, GHSA-g6xv-8q23-w2q3, GO-2022-0831 | High | 32.6% | 21 Nov, 2014 | Go gogs.io/gogs |
SQL Injection in gogs.io/gogs CVE-2014-8681, GHSA-mr6h-chqp-p9g2, GO-2020-0021 | High | 4.4% | 21 Nov, 2014 | Go github.com/gogits/gogs Go gogs.io/gogs |