Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Kubernetes arbitrary file overwrite CVE-2018-1002100, GHSA-2jq6-ffph-p4h8, GO-2023-1959 | Medium | 1.7% | 13 May, 2022 | Go k8s.io/kubernetes |
Gitea Arbitrary File Delete Vulnerability CVE-2019-1000002, GHSA-j99q-rwp6-498g | Medium | 1.1% | 13 May, 2022 | Go code.gitea.io/gitea |
Kubernetes DoS Vulnerability CVE-2019-1002100, GHSA-q4rr-64r9-fwgf, GO-2023-1946 | Medium | 16.9% | 13 May, 2022 | Go k8s.io/kubernetes |
Privilege escalation for users with create/update permissions in Global Roles in Rancher CVE-2021-36784, GHSA-jwvr-vv7p-gpwq | Medium | 0.9% | 02 May, 2022 | Go github.com/rancher/rancher |
Woodpecker allows cross-site scripting (XSS) via build logs CVE-2022-29947, GHSA-vmp5-c5hp-6c65, GO-2022-0440 | Medium | 0.7% | 30 Apr, 2022 | Go github.com/woodpecker-ci/woodpecker |
Insertion of Sensitive Information into Log File in Hashicorp go-getter CVE-2022-29810, GHSA-27rq-4943-qcwp, GO-2022-0438 | Medium | 0.4% | 28 Apr, 2022 | Go github.com/hashicorp/go-getter |
Incorrect Default Permissions in CRI-O CVE-2022-27652, GHSA-4hj2-r2pm-3hc6, GO-2022-0426 | Medium | 0.2% | 22 Apr, 2022 | Go github.com/cri-o/cri-o |
Improper Control of a Resource Through its Lifetime in Mattermost BIT-mattermost-2022-1385, CVE-2022-1385, GHSA-fxwj-v664-wv5g, GO-2022-0599 | Medium | 0.8% | 20 Apr, 2022 | Go github.com/mattermost/mattermost-server Go github.com/mattermost/mattermost-server/v5 Go github.com/mattermost/mattermost-server/v6 |
Improper Privilege Management in Mattermost BIT-mattermost-2022-1332, CVE-2022-1332, GHSA-qggc-pj29-j27m, GO-2022-0616 | Medium | 0.7% | 14 Apr, 2022 | Go github.com/mattermost/mattermost-server Go github.com/mattermost/mattermost-server/v5 Go github.com/mattermost/mattermost-server/v6 |
Resource exhaustion in Mattermost BIT-mattermost-2022-1337, CVE-2022-1337, GHSA-f37q-q7p2-ccfc, GO-2022-0595 | Medium | 0.9% | 14 Apr, 2022 | Go github.com/mattermost/mattermost-server Go github.com/mattermost/mattermost-server/v5 Go github.com/mattermost/mattermost-server/v6 |
Smokescreen SSRF via deny list bypass CVE-2022-24825, GHSA-gcj7-j438-hjj2, GO-2022-0429 | Medium | 0.9% | 07 Apr, 2022 | Go github.com/stripe/smokescreen |
Opened exploitable ports in default docker-compose.yaml in go-ipfs GHSA-fx5p-f64h-93xc, GO-2022-0418 | Medium | Not scored | 04 Apr, 2022 | Go github.com/ipfs/go-ipfs |
Non-empty default inheritable capabilities for linux container in Buildah CVE-2022-27651, GHSA-c3g4-w6cv-6v7h, GO-2022-0417 | Medium | 1.3% | 01 Apr, 2022 | Go github.com/containers/buildah |
Gitea Open Redirect BIT-gitea-2022-1058, CVE-2022-1058, GHSA-4rqq-rxvc-v2rc, GO-2024-2752 | Medium | 53.2% | 25 Mar, 2022 | Go code.gitea.io/gitea |
Path traversal allows leaking out-of-bound files from Argo CD repo-server CVE-2022-24731, GHSA-h6h5-6fmq-rh28, GO-2022-0358 | Medium | 1.0% | 24 Mar, 2022 | Go github.com/argoproj/argo-cd Go github.com/argoproj/argo-cd/v2 |
Path Traversal in Gitea BIT-gitea-2021-29134, CVE-2021-29134, GHSA-h3q4-vmw4-cpr5, GO-2022-0353 | Medium | 1.5% | 16 Mar, 2022 | Go code.gitea.io/gitea |
Sysctls applied to containers with host IPC or host network namespaces can affect the host GHSA-w2j5-3rcx-vx7x, GO-2022-0363 | Medium | Not scored | 15 Mar, 2022 | Go github.com/cri-o/cri-o |
SSRF in repository migration GHSA-q347-cg56-pcq4, GO-2022-0377 | Medium | Not scored | 14 Mar, 2022 | Go gogs.io/gogs |
Cross-site Scripting in Alist CVE-2022-26533, GHSA-jpj5-hg26-6jgc | Medium | 0.7% | 13 Mar, 2022 | Go github.com/Xhofe/alist |
SSRF in repository migration CVE-2022-0870, GHSA-7v5r-r995-q2x2, GO-2022-0566 | Medium | 3.4% | 12 Mar, 2022 | Go gogs.io/gogs |
Use of a Key Past its Expiration Date and Insufficient Session Expiration in Maddy Mail Server CVE-2022-24732, GHSA-6cp7-g972-w9m9 | Medium | 0.4% | 07 Mar, 2022 | Go github.com/foxcpp/maddy |
Multiple security issues in Pomerium's embedded envoy GHSA-j34v-3552-5r7j | Medium | Not scored | 01 Mar, 2022 | Go github.com/pomerium/pomerium |
Possible privilege escalation via bash completion script GHSA-w4f8-fxq2-j35v | Medium | Not scored | 01 Mar, 2022 | Go github.com/google/fscrypt |
Improper random number generation in github.com/coredns/coredns GHSA-gv9j-4w24-q7vx, GO-2022-0368 | Medium | Not scored | 01 Mar, 2022 | Go github.com/coredns/coredns |
Possible filesystem space exhaustion by local users CVE-2022-25326, GHSA-chxf-fjcf-7fwp, GHSA-mpq4-rjj8-fjph, GO-2022-0339 | Medium | 0.1% | 26 Feb, 2022 | Go github.com/google/fscrypt |
User login denial of service in github.com/google/fscrypt CVE-2022-25327, GHSA-8vwm-8vj8-rqjf, GHSA-p93v-m2r2-4387, GO-2022-0340 | Medium | 0.1% | 26 Feb, 2022 | Go github.com/google/fscrypt |
Command injection in github.com/google/fscrypt CVE-2022-25328, GHSA-wxjg-p59j-6c92 | Medium | 0.2% | 26 Feb, 2022 | Go github.com/google/fscrypt |
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers BIT-consul-2022-24687, CVE-2022-24687, GHSA-hj93-5fg3-3chr, GO-2022-0953 | Medium | 1.5% | 25 Feb, 2022 | Go github.com/hashicorp/consul |
Nomad Spread Job Stanza May Trigger Panic in Servers CVE-2022-24684, GHSA-6jm6-cmcp-fqjq, GO-2022-0560 | Medium | 1.4% | 16 Feb, 2022 | Go github.com/hashicorp/nomad |
Denial of Service in docker2aci CVE-2016-8579, GHSA-gfh2-7jg5-653p, GO-2022-0833 | Medium | 0.4% | 15 Feb, 2022 | Go github.com/appc/docker2aci |
Gitea Exposes Private Email Addresses CVE-2018-1000803, GHSA-f5fj-7265-jxhj, GO-2022-0823 | Medium | 1.4% | 15 Feb, 2022 | Go github.com/go-gitea/gitea |
Kubernetes Arbitrary Command Injection CVE-2018-1002101, GHSA-wqwf-x5cj-rg56, GO-2022-0886 | Medium | 4.0% | 15 Feb, 2022 | Go k8s.io/kubernetes |
Arbitrary File Write via Archive Extraction in mholt/archiver CVE-2018-1002207, GHSA-5wmg-j84w-4jj4, GO-2022-0799, SNYK-GOLANG-GITHUBCOMMHOLTARCHIVERCMDARCHIVER-50071 | Medium | 2.5% | 15 Feb, 2022 | Go github.com/mholt/archiver |
DNS Rebinding in etcd CVE-2018-1099, GHSA-wf43-55jj-vwq8 | Medium | 0.5% | 15 Feb, 2022 | Go go.etcd.io/etcd |
Pivotal Concourse Open Redirect in Login Flow CVE-2018-15798, GHSA-9689-rx4v-cqgc | Medium | 1.1% | 15 Feb, 2022 | Go github.com/concourse/concourse |
Symlink Attack in kubectl cp CVE-2019-1002101, GHSA-34jx-wx69-9x8v, GO-2022-0782 | Medium | 12.8% | 15 Feb, 2022 | Go k8s.io/kubernetes |
Kubernetes Unsafe Cacheing CVE-2019-11244, GHSA-2575-pghm-6qqx | Medium | 0.5% | 15 Feb, 2022 | Go k8s.io/client-go |
Hashicorp Nomad Information Exposure Through Environmental Variables CVE-2019-14802, GHSA-6hv3-7c34-4hx8, GO-2022-0634 | Medium | 0.6% | 15 Feb, 2022 | Go github.com/hashicorp/nomad |
Missing Authorization in Harbor CVE-2019-16097, GHSA-9wvh-ff5f-xjpj, GO-2022-0818 | Medium | 22.4% | 15 Feb, 2022 | Go github.com/goharbor/harbor |
Denial of Service (DoS) in HashiCorp Consul BIT-consul-2020-12758, CVE-2020-12758, GHSA-q2qr-3c2p-9235, GO-2022-0861 | Medium | 1.7% | 15 Feb, 2022 | Go github.com/hashicorp/consul |
Server Side Request Forgery in Grafana BIT-grafana-2020-13379, CVE-2020-13379, GHSA-wc9w-wvq2-ffm9 | Medium | 99.9% | 15 Feb, 2022 | Go github.com/grafana/grafana |
Improper Input Validation in Docker Engine CVE-2020-13401, GHSA-qrrc-ww9x-r43g | Medium | 2.9% | 15 Feb, 2022 | Go github.com/docker/docker-ce |
Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information Into Sent Data in Calico CVE-2020-13597, GHSA-pf59-j7c2-rh6x | Medium | 0.9% | 15 Feb, 2022 | Go github.com/projectcalico/calico |
Authorization bypass in Istio CVE-2020-16844, GHSA-82mm-ffjr-h86c | Medium | 1.1% | 15 Feb, 2022 | Go istio.io/istio |
Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers CVE-2020-2023, GHSA-6978-vg2j-cc9q | Medium | 1.1% | 15 Feb, 2022 | Go github.com/kata-containers/agent Go github.com/kata-containers/runtime |
Path Traversal in HashiCorp Nomad CVE-2020-28348, GHSA-5x92-p4p5-33c4, GO-2022-0770 | Medium | 1.7% | 15 Feb, 2022 | Go github.com/hashicorp/nomad |
Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes CVE-2020-8551, GHSA-qhm4-jxv7-j9pq, GO-2022-0867 | Medium | 1.2% | 15 Feb, 2022 | Go k8s.io/kubernetes |
Kubernetes API Server DoS Via API Requests CVE-2020-8552, GHSA-82hx-w2r5-c2wq | Medium | 2.8% | 15 Feb, 2022 | Go k8s.io/apiserver |
Server Side Request Forgery (SSRF) in Kubernetes CVE-2020-8555, GHSA-x6mj-w4jf-jmgw, GO-2022-0890 | Medium | 3.7% | 15 Feb, 2022 | Go k8s.io/kubernetes |
Directory traversal in Kubernetes Secrets Store CSI Driver CVE-2020-8568, GHSA-5cgx-vhfp-6cf9, GO-2022-0629 | Medium | 1.3% | 15 Feb, 2022 | Go sigs.k8s.io/secrets-store-csi-driver |