Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
usememos/memos Incorrect Use of Privileged APIs vulnerability CVE-2022-4805, GHSA-mq5q-gpgv-pwxw, GO-2023-1292 | Medium | 0.5% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4806, GHSA-pp3p-6jjh-rmg7, GO-2022-1261 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4807, GHSA-gfj4-wg89-m22r, GO-2022-1256 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4810, GHSA-qf9q-3wwx-8qjv, GO-2022-1263 | Medium | 0.5% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authorization vulnerability CVE-2022-4811, GHSA-hc5q-26h8-r9wf, GO-2022-1259 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Comparison of Object References Instead of Object Contents CVE-2022-4812, GHSA-m5pr-wm6q-x4g2, GO-2022-1260 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos has Insufficient Granularity of Access Control CVE-2022-4813, GHSA-7qpw-2j9m-rw8c, GO-2022-1253 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4814, GHSA-6fx9-29x2-fmfj, GO-2022-1251 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts CVE-2022-4797, GHSA-qrrf-xvcf-p64q, GO-2022-1244 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authorization vulnerability CVE-2022-4798, GHSA-qcf5-m2c6-89f2, GO-2022-1243 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authentication vulnerability CVE-2022-4799, GHSA-jvq8-w7qv-hqp6, GO-2022-1239 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel CVE-2022-4800, GHSA-mfvq-m3jj-8864, GO-2022-1240 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos has Insufficient Granularity of Access Control CVE-2022-4801, GHSA-f83p-pg86-p922, GO-2022-1235 | Medium | 0.7% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Improper Authorization CVE-2022-4802, GHSA-rx2m-xr4x-54hh, GO-2022-1248 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authorization vulnerability CVE-2022-4804, GHSA-qw36-rw5q-gxcq, GO-2022-1245 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4691, GHSA-97rc-mm5j-f6rj, GO-2022-1225 | Medium | 0.7% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4694, GHSA-v92p-phmp-xffr | Medium | 0.6% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4695, GHSA-c2v4-8r9g-g5xj | Medium | 0.7% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos may leak user information to an authenticated user CVE-2022-4734, GHSA-j593-h5v3-45x6, GO-2022-1220 | Medium | 0.8% | 27 Dec, 2022 | Go github.com/usememos/memos |
docconv vulnerable to Memory Allocation with Excessive Size Value CVE-2022-4741, GHSA-qvx2-59g8-8hph, GO-2022-1188 | Medium | 0.8% | 25 Dec, 2022 | Go code.sajari.com/docconv Go github.com/sajari/docconv |
Macaron i18n Open Redirect vulnerability CVE-2020-36627, GHSA-jwrv-x6rx-8vfm, GO-2022-1187 | Medium | 0.6% | 25 Dec, 2022 | Go github.com/go-macaron/i18n |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4692, GHSA-f552-97qx-c694, GO-2022-1216 | Medium | 0.6% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos missing Secure cookie attribute CVE-2022-4683, GHSA-qcw2-492v-57xj, GO-2022-1192 | Medium | 0.4% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to improper access control CVE-2022-4685, GHSA-9v48-2h5x-fvpm, GO-2022-1205 | Medium | Not scored | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored cross-site scripting (XSS) CVE-2022-4690, GHSA-c8jh-vcjh-fx2w, GO-2022-1189 | Medium | 0.6% | 23 Dec, 2022 | Go github.com/usememos/memos |
leanote vulnerable to cross-site scripting CVE-2021-4263, GHSA-6cmv-2548-82v4 | Medium | 0.6% | 21 Dec, 2022 | Go github.com/leanote/leanote |
studygolang vulnerable to cross-site scripting CVE-2021-4272, GHSA-gw62-c7w4-x449 | Medium | 0.4% | 21 Dec, 2022 | Go github.com/studygolang/studygolang |
AAD Pod Identity obtaining token with backslash CVE-2022-23551, GHSA-p82q-rxpm-hjpc, GO-2022-1181 | Medium | 0.8% | 21 Dec, 2022 | Go github.com/Azure/aad-pod-identity |
ghinstallation returns app JWT in error responses CVE-2022-39304, GHSA-h4q8-96p6-jcgr, GO-2022-1178 | Medium | 0.4% | 19 Dec, 2022 | Go github.com/bradleyfalzon/ghinstallation |
Cortex's Alertmanager can expose local files content via specially crafted config CVE-2022-23536, GHSA-cq2g-pw6q-hf7j, GO-2022-1175 | Medium | 0.8% | 19 Dec, 2022 | Go github.com/cortexproject/cortex |
Memos Cross-site Scripting vulnerability CVE-2022-4609, GHSA-rgj5-jj5q-v3v7 | Medium | 0.8% | 19 Dec, 2022 | Go github.com/usememos/memos |
Helm vulnerable to denial of service through schema file BIT-helm-2022-23526, CVE-2022-23526, GHSA-67fx-wx78-jx33, GO-2022-1166 | Medium | 0.9% | 14 Dec, 2022 | Go helm.sh/helm/v3 |
Helm vulnerable to denial of service through through repository index file BIT-helm-2022-23525, CVE-2022-23525, GHSA-53c4-hhmh-vw5q, GO-2022-1165 | Medium | 0.9% | 14 Dec, 2022 | Go helm.sh/helm/v3 |
Helm vulnerable to denial of service through string value parsing BIT-helm-2022-23524, CVE-2022-23524, GHSA-6rx9-889q-vv2r, GO-2022-1167 | Medium | 0.8% | 14 Dec, 2022 | Go helm.sh/helm/v3 |
csaf-poc/csaf_distribution Cross-site Scripting vulnerability CVE-2022-43996, GHSA-xxfx-w2rw-gh63, GO-2022-1164 | Medium | 0.5% | 14 Dec, 2022 | Go github.com/csaf-poc/csaf_distribution |
Alist Cross-site Scripting vulnerability CVE-2022-45970, GHSA-957m-g6rf-4c2m | Medium | 0.5% | 12 Dec, 2022 | Go github.com/alist-org/alist/v3 |
golang.org/x/net/http2 vulnerable to possible excessive memory growth BIT-golang-2022-41717, CVE-2022-41717, GHSA-xrjj-mj9h-534m, GO-2022-1144 | Medium | 6.1% | 08 Dec, 2022 | Go golang.org/x/net Go golang.org/x/net/http2 Go stdlib |
Buildah (as part of Podman) vulnerable to Link Following CVE-2022-4122, GHSA-4crw-w8pw-2hmf, GO-2022-1151 | Medium | 0.9% | 08 Dec, 2022 | Go github.com/containers/podman Go github.com/containers/podman/v2 Go github.com/containers/podman/v3 Go github.com/containers/podman/v4 |
Traefik routes exposed with an empty TLSOption CVE-2022-46153, GHSA-468w-8x39-gj5v, GO-2022-1152 | Medium | 0.5% | 08 Dec, 2022 | Go github.com/traefik/traefik Go github.com/traefik/traefik/v2 |
containerd CRI stream server vulnerable to host memory exhaustion via terminal CVE-2022-23471, GHSA-2qjp-425j-52j9, GO-2022-1147 | Medium | 1.1% | 07 Dec, 2022 | Go github.com/containerd/containerd |
kube-httpcache is vulnerable to Cross-Site Request Forgery (CSRF) GHSA-47xh-qxqv-mgvg | Medium | Not scored | 02 Dec, 2022 | Go github.com/mittwald/kube-httpcache |
Prometheus Exporter-Toolkit is vulnerable to authentication bypass CVE-2022-46146, GHSA-7rg2-cxvp-9p7p, GO-2022-1130 | Medium | 1.3% | 29 Nov, 2022 | Go github.com/prometheus/exporter-toolkit |
Denial of service in Mattermost CVE-2022-4045, GHSA-v42f-hq78-8c5m | Medium | 0.6% | 23 Nov, 2022 | Go github.com/mattermost/mattermost-server |
Denial of service in Mattermost CVE-2022-4044, GHSA-5jph-wrq7-v9hf | Medium | 1.1% | 23 Nov, 2022 | Go github.com/mattermost/mattermost-server |
Lack of proper validation of server UUID can be used by the server to trick the client to accept invalid proofs CVE-2022-39199, GHSA-6cqj-6969-p57x, GO-2022-1118 | Medium | 0.3% | 21 Nov, 2022 | Go github.com/codenotary/immudb |
Insufficient Verification of Proofs generated by the immudb server in client SDK. CVE-2022-36111, GHSA-672p-m5jq-mrh8, GO-2022-1117 | Medium | 0.4% | 21 Nov, 2022 | Go github.com/codenotary/immudb |
KubeVela VelaUX APIserver has SSRF vulnerability CVE-2022-39383, GHSA-m5xf-x7q6-3rm7, GO-2022-1113 | Medium | 0.4% | 18 Nov, 2022 | Go github.com/oam-dev/kubevela |
mm-wiki is vulnerable to Cross-Site Scripting (XSS) CVE-2021-40289, GHSA-99g5-5643-xphp | Medium | 0.5% | 10 Nov, 2022 | Go github.com/phachon/mm-wiki |
HashiCorp Nomad vulnerable to non-sensitive metadata exposure CVE-2022-3866, GHSA-7wg4-8m5p-hrfg, GO-2022-1105 | Medium | 0.6% | 10 Nov, 2022 | Go github.com/hashicorp/nomad |
OpenFGA Authorization Bypass CVE-2022-39352, GHSA-3gfj-fxx4-f22w, GO-2022-1099 | Medium | 0.5% | 08 Nov, 2022 | Go github.com/openfga/openfga |