Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service CVE-2020-25614, GHSA-93m7-c69f-5cfj, GO-2020-0048 | High | 1.9% | 14 Apr, 2021 | Go github.com/antchfx/xmlquery |
Authorization bypass in github.com/dgrijalva/jwt-go CVE-2020-26160, GHSA-w73w-5m7g-f7qc, GO-2020-0017, SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515 | High | 2.2% | 14 Apr, 2021 | Go github.com/dgrijalva/jwt-go Go github.com/dgrijalva/jwt-go/v4 |
Integer overflow in github.com/gorilla/websocket CVE-2020-27813, GHSA-3xh2-74w9-5vxm, GHSA-jf24-p9p9-4rjh, GO-2020-0019 | High | 2.2% | 14 Apr, 2021 | Go github.com/gorilla/websocket |
Inconsistent Interpretation of HTTP Requests in github.com/gin-gonic/gin CVE-2020-28483, GHSA-h395-qcrw-5vmq, GO-2021-0052, SNYK-GOLANG-GITHUBCOMGINGONICGIN-1041736 | High | 1.3% | 14 Apr, 2021 | Go github.com/gin-gonic/gin |
Unsafe tar unpacking in HashiCorp go-slug CVE-2020-29529, GHSA-2g5j-5x95-r6hr, GO-2021-0094 | High | 2.8% | 14 Apr, 2021 | Go github.com/hashicorp/go-slug |
Denial of service in GJSON CVE-2020-35380, GHSA-w942-gw6m-p62c, GO-2021-0059 | High | 1.5% | 14 Apr, 2021 | Go github.com/tidwall/gjson |
Denial of Service in jsonparser CVE-2020-35381, GHSA-8vrw-m3j9-j27c, GO-2021-0057 | High | 2.3% | 14 Apr, 2021 | Go github.com/buger/jsonparser |
Improper Validation of Array Index in GJSON CVE-2020-36067, GHSA-p64j-r5f4-pwwx, GO-2021-0054 | High | 1.4% | 14 Apr, 2021 | Go github.com/tidwall/gjson |
ahh vulnerable to Path Traversal CVE-2020-36559, GHSA-vp56-r7qv-783v, GO-2020-0033 | High | 1.2% | 14 Apr, 2021 | Go aahframe.work Go github.com/go-aah/aah |
shiyanhui/dht vulnerable to Uncontrolled Resource Consumption CVE-2020-36562, GHSA-p6fg-723f-hgpw, GO-2020-0040 | High | 0.8% | 14 Apr, 2021 | Go github.com/shiyanhui/dht |
nosurf vulnerable to improper input validation CVE-2020-36564, GHSA-5x84-q523-vvwr, GO-2020-0049 | High | 0.8% | 14 Apr, 2021 | Go github.com/justinas/nosurf |
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines CVE-2020-36567, GHSA-6vm3-jj99-7229, GO-2020-0001 | High | 1.5% | 14 Apr, 2021 | Go github.com/gin-gonic/gin |
github.com/sassoftware/go-rpmutils Arbitrary File Write via Archive Extraction (Zip Slip) CVE-2020-7667, GHSA-9423-6c93-gpp8, GO-2020-0042, SNYK-GOLANG-GITHUBCOMSASSOFTWAREGORPMUTILSCPIO-570427 | High | 1.6% | 14 Apr, 2021 | Go github.com/sassoftware/go-rpmutils |
github.com/unknwon/cae Path Traversal vulnerability CVE-2020-7668, GHSA-88jf-7rch-32qc, GO-2020-0041 | High | 1.4% | 14 Apr, 2021 | Go github.com/unknwon/cae |
Duplicate Advisory: gosaml2 is vulnerable to NULL Pointer Dereference from malformed XML signatures CVE-2020-7711, CVE-2020-7731, GHSA-gq5r-cc4w-g8xf, GHSA-mqqv-chpx-vq25, GHSA-prjq-f4q3-fvfr, GO-2020-0046, SNYK-GOLANG-GITHUBCOMRUSSELLHAERINGGOSAML2-608302 | High | 1.8% | 14 Apr, 2021 | Go github.com/russellhaering/gosaml2 Go github.com/russellhaering/goxmldsig |
TPM 1.2 key authorization values vulnerable to TPM transport eavesdropper in go-tpm CVE-2020-8918, GHSA-5x29-3hr9-6wpw, GO-2021-0095 | High | 0.2% | 14 Apr, 2021 | Go github.com/google/go-tpm |
GPGME Go wrapper contains Use After Free CVE-2020-8945, GHSA-m6wg-2mwg-4rfq, GO-2021-0096 | High | 5.1% | 14 Apr, 2021 | Go github.com/proglottis/gpgme |
Improper Verification of Cryptographic Signature in golang.org/x/crypto CVE-2020-9283, GHSA-ffhg-7mh4-33c4, GO-2020-0012 | High | 21.1% | 14 Apr, 2021 | Go golang.org/x/crypto |
Git LFS can execute a Git binary from the current directory on Windows BIT-git-lfs-2021-21237, CVE-2021-21237, GHSA-cx3w-xqmc-84g5, GO-2021-0098 | High | 0.5% | 14 Apr, 2021 | Go github.com/git-lfs/git-lfs |
Zip slip directory exploit in github.com/deislabs/oras BIT-oras-2021-21272, CVE-2021-21272, GHSA-g5v4-5x39-vwhx, GO-2021-0099 | High | 1.5% | 14 Apr, 2021 | Go github.com/deislabs/oras |
github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS) CVE-2021-29482, GHSA-25xm-hr59-7c27, GO-2020-0016 | High | 1.4% | 14 Apr, 2021 | Go github.com/ulikunitz/xz |
Improper Input Validation in GoGo Protobuf BIT-consul-2021-3121, BIT-protobuf-2021-3121, CVE-2021-3121, GHSA-c3h9-896r-86jm, GO-2021-0053 | High | 3.4% | 14 Apr, 2021 | Go github.com/gogo/protobuf |
Certificate validation bypass on Windows in crypto/x509 BIT-golang-2020-0601, CVE-2020-0601, GO-2022-0535 | HighExploited | 89.1% | 14 Jan, 2020 | Go stdlib |
Path Traversal in Docker CVE-2014-9356, GHSA-vj3f-3286-r4pf, GO-2022-0751 | High | 4.9% | 02 Dec, 2019 | Go github.com/docker/docker |
LXD vulnerable to Race Condition CVE-2015-1340, GHSA-8mpq-fmr3-6jxv, GO-2021-0071 | High | 0.9% | 22 Apr, 2019 | Go github.com/lxc/lxd |
protobuf susceptible to buffer overflow CVE-2015-5237, GHSA-jwvw-v7c5-m82h, PYSEC-2017-150, PYSEC-2017-65 | High | 5.0% | 25 Sep, 2017 | Go github.com/protocolbuffers/protobuf Maven com.google.protobuf:protobuf-parent NuGet Google.Protobuf Packagist google/protobuf +1 more |
Incorrect calculation affecting RSA computations in math/big CVE-2015-8618, GO-2021-0160 | High | 2.6% | 27 Jan, 2016 | Go stdlib |
Information Exposure in Docker Engine CVE-2015-3630, GHSA-8fvr-5rqf-3wwh, GO-2022-0638 | High | 0.5% | 18 May, 2015 | Go github.com/docker/docker |
Arbitrary File Write in Libcontainer CVE-2015-3629, GHSA-g44j-7vp3-68cv, GO-2022-0647 | High | 0.6% | 18 May, 2015 | Go github.com/docker/docker |
Symlink Attack in Libcontainer and Docker Engine CVE-2015-3627, GHSA-g7v2-2qxx-wjrw, GO-2022-0649 | High | 0.6% | 18 May, 2015 | Go github.com/docker/docker |
Arbitrary Code Execution CVE-2014-9357, GHSA-997c-fj8j-rq5h, GO-2022-0640 | High | 6.2% | 16 Dec, 2014 | Go github.com/docker/docker |
Arbitrary Code Execution in Docker CVE-2014-6407, GHSA-5qgp-p5jc-w2rm, GO-2022-0630 | High | 4.9% | 12 Dec, 2014 | Go github.com/docker/docker |
SQL Injection in Gogs CVE-2014-8682, GHSA-g6xv-8q23-w2q3, GO-2022-0831 | High | 32.6% | 21 Nov, 2014 | Go gogs.io/gogs |
SQL Injection in gogs.io/gogs CVE-2014-8681, GHSA-mr6h-chqp-p9g2, GO-2020-0021 | High | 4.4% | 21 Nov, 2014 | Go github.com/gogits/gogs Go gogs.io/gogs |
Privilege Escalation in Docker CVE-2014-3499, GHSA-wxj3-qwv4-cvfm, GO-2022-0752 | High | 0.4% | 11 Jul, 2014 | Go github.com/docker/docker |