Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Answer vulnerable to Cross-site Scripting CVE-2023-0934, GHSA-6cvf-m58q-h9wf, GO-2023-1592 | Medium | 0.4% | 21 Feb, 2023 | Go github.com/answerdev/answer |
Uncontrolled Resource Consumption in Hashicorp Nomad CVE-2023-0821, GHSA-w479-w22g-cffh, GO-2023-1581 | Medium | 0.8% | 17 Feb, 2023 | Go github.com/hashicorp/nomad |
Uncontrolled Resource Consumption in golang.org/x/image CVE-2022-41727, GHSA-qgc7-mgm3-q253, GO-2023-1572 | Medium | 0.3% | 16 Feb, 2023 | Go golang.org/x/image |
Data Amplification in HashiCorp go-getter CVE-2023-0475, GHSA-jpxj-2jvg-6jv9, GO-2023-1578 | Medium | 0.5% | 16 Feb, 2023 | Go github.com/hashicorp/go-getter Go github.com/hashicorp/go-getter/v2 |
OCI image importer memory exhaustion in github.com/containerd/containerd CVE-2023-25153, GHSA-259w-8hf6-59c2, GO-2023-1573 | Medium | 0.4% | 16 Feb, 2023 | Go github.com/containerd/containerd |
Supplementary groups are not set up properly in github.com/containerd/containerd CVE-2023-25173, GHSA-hmfx-3pcx-653p, GO-2023-1574 | Medium | 0.5% | 16 Feb, 2023 | Go github.com/containerd/containerd |
Cross Site Scripting in usememos/memos CVE-2022-25978, GHSA-9w8x-5hv5-r6gw, GO-2023-1566 | Medium | 0.5% | 15 Feb, 2023 | Go github.com/usememos/memos |
Denial of service via HAMT Decoding Panics CVE-2023-23625, GHSA-q264-w97q-q778, GO-2023-1557 | Medium | 0.7% | 10 Feb, 2023 | Go github.com/ipfs/go-unixfs |
IPFS go-bitfield vulnerable to DoS via malformed size arguments CVE-2023-23626, GHSA-2h6c-j3gf-xp9r, GO-2023-1558 | Medium | 0.9% | 10 Feb, 2023 | Go github.com/ipfs/go-bitfield |
Argo CD leaks repository credentials in user-facing error messages and in logs BIT-argo-cd-2023-25163, CVE-2023-25163, GHSA-mv6w-j4xc-qpfw, GO-2023-1548 | Medium | 0.8% | 08 Feb, 2023 | Go github.com/argoproj/argo-cd/v2 |
Helm vulnerable to information disclosure via getHostByName Function BIT-helm-2023-25165, CVE-2023-25165, GHSA-pwcw-6f5g-gxf8, GO-2023-1547 | Medium | 0.8% | 08 Feb, 2023 | Go helm.sh/helm/v3 |
Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set CVE-2023-24827, GHSA-jp7v-3587-2956, GO-2023-1533 | Medium | 0.8% | 08 Feb, 2023 | Go github.com/anchore/syft |
Answer vulnerable to Race Condition CVE-2023-0739, GHSA-qx34-47fc-vv79, GO-2023-1553 | Medium | 0.7% | 08 Feb, 2023 | Go github.com/answerdev/answer |
Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2 GHSA-4xgv-j62q-h3rj, GO-2023-1534 | Medium | Not scored | 07 Feb, 2023 | Go github.com/pion/dtls Go github.com/pion/dtls/v2 |
Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2 GHSA-hxp2-xqf3-v83h, GO-2023-1535 | Medium | Not scored | 07 Feb, 2023 | Go github.com/pion/dtls Go github.com/pion/dtls/v2 |
Open Redirect in Caddy CVE-2022-28923, GHSA-qpm3-vr34-h8w8, GO-2023-1567 | Medium | 1.4% | 07 Feb, 2023 | Go github.com/caddyserver/caddy/v2 |
Grafana Spoofing originalUrl of snapshots BIT-grafana-2022-39324, CVE-2022-39324, GHSA-4724-7jwc-3fpw, GO-2024-2867 | Medium | 0.8% | 27 Jan, 2023 | Go github.com/grafana/grafana |
Initial debug-host handler implementation could leak information and facilitate denial of service GHSA-x477-fq37-q5wr, GO-2023-1524 | Medium | Not scored | 27 Jan, 2023 | Go fortio.org/proxy |
github.com/openshift/apiserver-library-go Improper Input Validation vulnerability CVE-2023-0229, GHSA-5465-xc2j-6p84, GO-2023-1549 | Medium | 0.6% | 26 Jan, 2023 | Go github.com/openshift/apiserver-library-go |
Denial of service (DoS) when processing Git credentials CVE-2022-43756, GHSA-8fcj-gf77-47mg, GO-2023-1515 | Medium | 0.7% | 25 Jan, 2023 | Go github.com/rancher/wrangler |
Command injection in Rancher Git package CVE-2022-43758, GHSA-34p5-jp77-fcrc | Medium | 1.0% | 25 Jan, 2023 | Go github.com/rancher/rancher |
Path Traversal in github.com/go-sonic/sonic CVE-2022-46959, GHSA-2x48-p6cq-5xcw, GO-2023-1509 | Medium | 0.8% | 23 Jan, 2023 | Go github.com/go-sonic/sonic |
scs-library-client may leak user credentials to third-party service via HTTP redirect CVE-2022-23538, GHSA-7p8m-22h4-9pj7, GO-2023-1497 | Medium | 0.7% | 20 Jan, 2023 | Go github.com/sylabs/scs-library-client |
Velociraptor subject to Path Traversal CVE-2023-0290, GHSA-7jf5-fvgf-48c6, GO-2023-1502 | Medium | 0.8% | 19 Jan, 2023 | Go www.velocidex.com/golang/velociraptor |
Zitadel RefreshToken invalidation vulnerability CVE-2023-22492, GHSA-6rrr-78xp-5jp8 | Medium | 0.6% | 11 Jan, 2023 | Go github.com/zitadel/zitadel |
Reflected XSS in Gotify's /docs via import of outdated Swagger UI GHSA-3244-8mff-w398, GO-2023-1471 | Medium | Not scored | 10 Jan, 2023 | Go github.com/gotify/server Go github.com/gotify/server/v2 |
easy-scrypt Observable Timing Discrepancy vulnerability CVE-2014-125055, GHSA-r894-5r7v-7rx3, GO-2023-1294 | Medium | 0.7% | 07 Jan, 2023 | Go github.com/agnivade/easy-scrypt |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0106, GHSA-8686-4cr3-76wj | Medium | 0.7% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0107, GHSA-pcvh-px2p-vmxw | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0108, GHSA-fpjc-cxr6-w6h8, GO-2023-1462 | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0110, GHSA-x22v-qgm2-7qc7, GO-2023-1469 | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0111, GHSA-h2ph-9r76-37v5, GO-2023-1465 | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0112, GHSA-9h7x-9pmh-7gg8, GO-2023-1461 | Medium | 0.6% | 07 Jan, 2023 | Go github.com/usememos/memos |
go-ipld-prime/codec/json may panic if asked to encode bytes CVE-2023-22460, GHSA-c653-6hhg-9x92, GO-2023-1269 | Medium | 1.2% | 05 Jan, 2023 | Go github.com/ipld/go-ipld-prime |
usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges CVE-2022-4863, GHSA-6whj-8g9g-5jvx, GO-2023-1270 | Medium | 0.7% | 30 Dec, 2022 | Go github.com/usememos/memos |
efs-utils and aws-efs-csi-driver have race condition during concurrent TLS mounts CVE-2022-46174, GHSA-4fv8-w65m-3932 | Medium | 0.6% | 30 Dec, 2022 | Go github.com/kubernetes-sigs/aws-efs-csi-driver |
pastebinit Path Traversal vulnerability CVE-2018-25059, GHSA-cwh7-28vg-jmpr, GO-2022-1212 | Medium | 0.8% | 30 Dec, 2022 | Go github.com/jessfraz/pastebinit |
gotify/server vulnerable to Cross-site Scripting in the application image file upload CVE-2022-46181, GHSA-xv6x-456v-24xh, GO-2022-1208 | Medium | 0.5% | 30 Dec, 2022 | Go github.com/gotify/server Go github.com/gotify/server/v2 |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4839, GHSA-gxqf-4g4p-q3hc | Medium | 0.8% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4840, GHSA-pwhr-p68w-296x | Medium | 0.7% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4841, GHSA-rmhx-9h5h-3xh3 | Medium | 0.6% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4845, GHSA-gw9m-2m5v-c6x5, GO-2022-1257 | Medium | 0.3% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4846, GHSA-cwrm-33qq-4w2x | Medium | 0.3% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos has Incorrectly Specified Destination in a Communication Channel CVE-2022-4847, GHSA-r7hg-2cpp-8wqq, GO-2022-1264 | Medium | 0.7% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel CVE-2022-4848, GHSA-vh43-cc6x-prpr, GO-2022-1266 | Medium | 0.6% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4849, GHSA-642q-2q68-9j3p, GO-2022-1250 | Medium | 0.4% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4850, GHSA-c5hq-35h7-r9x4 | Medium | 0.4% | 29 Dec, 2022 | Go github.com/usememos/memos |
sememos/memos vulnerable to Improper Handling of Values CVE-2022-4851, GHSA-42q2-m54f-jh95, GO-2023-1285 | Medium | 0.8% | 29 Dec, 2022 | Go github.com/usememos/memos |
CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation CVE-2022-4318, GHSA-cm9x-c3rh-7rc4, GO-2022-1206 | Medium | 0.3% | 29 Dec, 2022 | Go github.com/cri-o/cri-o |
OpenShift OSIN vulnerable to Observable Timing Discrepancy CVE-2021-4294, GHSA-m7qp-cj9p-gj85, GO-2022-1201 | Medium | 0.7% | 28 Dec, 2022 | Go github.com/openshift/osin |