Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
personnummer/go vulnerable to Improper Input Validation GHSA-hv53-vf5m-8q94 | Low | Not scored | 11 Feb, 2022 | Go github.com/personnummer/go |
In-band key negotiation issue in AWS S3 Crypto SDK for golang CVE-2020-8912, GHSA-7f33-f4f5-xwgw, GO-2022-0635 | Low | Not scored | 11 Feb, 2022 | Go github.com/aws/aws-sdk-go |
Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) BIT-harbor-2020-13788, CVE-2020-13788, GHSA-33p6-fx42-7rf5, GO-2022-0781 | Low | Not scored | 11 Feb, 2022 | Go github.com/goharbor/harbor |
OCI Manifest Type Confusion Issue GHSA-qq97-vm5h-rrhg, GO-2022-0379 | Low | Not scored | 08 Feb, 2022 | Go github.com/docker/distribution |
Potential proxy IP restriction bypass in Kubernetes CVE-2020-8562, GHSA-qh36-44jv-c8xj, GO-2022-0617 | Low | Not scored | 02 Feb, 2022 | Go k8s.io/kubernetes |
kubectl ANSI escape characters not filtered CVE-2021-25743, GHSA-f9jg-8p32-2f55, GO-2022-0983 | Low | Not scored | 08 Jan, 2022 | Go k8s.io/kubernetes |
devices resource list treated as a blacklist by default GHSA-g54h-m393-cpwq, GO-2022-0396 | Low | Not scored | 20 Dec, 2021 | Go github.com/opencontainers/runc |
Clarify Content-Type handling CVE-2021-41190, GHSA-mc8v-mgrf-8f4m | Low | Not scored | 18 Nov, 2021 | Go github.com/opencontainers/distribution-spec |
Ambiguous OCI manifest parsing GHSA-5j5w-g665-5m35, GO-2022-0360 | Low | Not scored | 18 Nov, 2021 | Go github.com/containerd/containerd |
Clarify `mediaType` handling GHSA-77vh-xpmg-72qh | Low | Not scored | 18 Nov, 2021 | Go github.com/opencontainers/image-spec |
Hashicorp Vault Privilege Escalation Vulnerability BIT-vault-2021-41802, CVE-2021-41802, GHSA-qv95-g3gm-x542, GO-2022-0618 | Low | Not scored | 12 Oct, 2021 | Go github.com/hashicorp/vault |
MD5 hash support in github.com/foxcpp/maddy GHSA-qh54-9vc5-m9fg, GO-2022-0378 | Low | Not scored | 12 Oct, 2021 | Go github.com/foxcpp/maddy |
Confused Deputy in Kubernetes CVE-2021-25740, GHSA-vw47-mr44-3jf9 | Low | Not scored | 21 Sep, 2021 | Go k8s.io/kubernetes |
Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` GHSA-prqf-xr2j-xf65, GO-2022-0405 | Low | Not scored | 23 Aug, 2021 | Go github.com/argoproj/argo-workflows Go github.com/argoproj/argo-workflows/v2 Go github.com/argoproj/argo-workflows/v3 |
Plugin archive directory traversal in Helm BIT-helm-2020-4053, CVE-2020-4053, GHSA-qq3j-xp49-j73f | Low | Not scored | 23 Jun, 2021 | Go helm.sh/helm/v3 |
Denial of service in Tendermint CVE-2020-5303, GHSA-v24h-pjjv-mcp6 | Low | Not scored | 27 May, 2021 | Go github.com/tendermint/tendermint |
Subdomain checking of whitelisted domains could allow unintended redirects in oauth2-proxy BIT-oauth2-proxy-2021-21291, CVE-2021-21291, GHSA-4mf2-f3wh-gvf2, GO-2022-0790 | Low | Not scored | 25 May, 2021 | Go github.com/oauth2-proxy/oauth2-proxy Go github.com/oauth2-proxy/oauth2-proxy/v7 |
accounts: Hash account number using Salt GHSA-g636-q5fc-4pr7 | Low | Not scored | 24 May, 2021 | Go github.com/moov-io/customers |
plugin.yaml file allows for duplicate entries in helm BIT-helm-2020-15187, CVE-2020-15187, GHSA-c52f-pq47-2r9j | Low | Not scored | 24 May, 2021 | Go helm.sh/helm Go helm.sh/helm/v3 |
Improper Sanitizing of plugin names in helm BIT-helm-2020-15186, CVE-2020-15186, GHSA-m54r-vrmv-hw33 | Low | Not scored | 24 May, 2021 | Go helm.sh/helm Go helm.sh/helm/v3 |
Repository index file allows for duplicates of the same chart entry in helm BIT-helm-2020-15185, CVE-2020-15185, GHSA-jm56-5h66-w453 | Low | Not scored | 24 May, 2021 | Go helm.sh/helm Go helm.sh/helm/v3 |
Aliases are never checked in helm BIT-helm-2020-15184, CVE-2020-15184, GHSA-9vp5-m38w-j776 | Low | Not scored | 24 May, 2021 | Go helm.sh/helm Go helm.sh/helm/v3 |
A failed upgrade may lead to hung goroutines GHSA-gmq2-39ff-f5qg | Low | Not scored | 21 May, 2021 | Go github.com/cloudflare/tableflip |
Crash due to malformed relay protocol message BIT-syncthing-2021-21404, CVE-2021-21404, GHSA-x462-89pf-6r5h, GO-2022-0888 | Low | Not scored | 21 May, 2021 | Go github.com/syncthing/syncthing |
Import loops in account imports, nats-server DoS GHSA-gwj5-3vfq-q992, GO-2022-0398 | Low | Not scored | 21 May, 2021 | Go github.com/nats-io/nats-server Go github.com/nats-io/nats-server/v2 |
Network policy may be bypassed by some ICMP Echo Requests GHSA-c66w-hq56-4q97, GO-2022-0393 | Low | Not scored | 21 May, 2021 | Go github.com/cilium/cilium |
Local directory executable lookup in sops (Windows-only) GHSA-x5c7-x7m2-rhmf, GO-2022-0410 | Low | Not scored | 20 May, 2021 | Go go.mozilla.org/sops Go go.mozilla.org/sops/v3 |
Information Disclosure in go.elastic.co/apm CVE-2021-22133, GHSA-qqc5-rgcc-cjqh, GO-2022-0706 | Low | Not scored | 18 May, 2021 | Go go.elastic.co/apm |