Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
KubeOperator allows unauthorized access to system API CVE-2023-22480, GHSA-jxgp-jgh3-8jc8 | High | 66.8% | 09 Jan, 2023 | Go github.com/KubeOperator/KubeOperator |
KubePi session fixation attack allows an attacker to hijack a legitimate user session. CVE-2023-22479, GHSA-v4w5-r2xc-7f8h, GO-2023-1468 | High | 0.4% | 09 Jan, 2023 | Go github.com/KubeOperator/kubepi |
KubePi may allow unauthorized access to system API CVE-2023-22478, GHSA-gqx8-hxmv-c4v4, GO-2023-1463 | High | 3.7% | 09 Jan, 2023 | Go github.com/KubeOperator/kubepi |
Gitops Run insecure communication CVE-2022-23509, GHSA-89qm-wcmw-3mgg, GO-2023-1388 | High | 0.3% | 09 Jan, 2023 | Go github.com/weaveworks/weave-gitops |
GitOps Run allows for Kubernetes workload injection CVE-2022-23508, GHSA-wr3c-g326-486c, GO-2023-1377 | High | 0.3% | 09 Jan, 2023 | Go github.com/weaveworks/weave-gitops |
Squalor SQL Injection vulnerability CVE-2020-36645, GHSA-3hc7-2xcc-7p8f, GO-2023-1295 | Critical | 0.7% | 07 Jan, 2023 | Go github.com/square/squalor |
gosqljson SQL Injection vulnerability CVE-2014-125064, GHSA-g7mw-9pf9-p2pm, GO-2023-1494 | Critical | Not scored | 07 Jan, 2023 | Go github.com/elgs/gosqljson |
easy-scrypt Observable Timing Discrepancy vulnerability CVE-2014-125055, GHSA-r894-5r7v-7rx3, GO-2023-1294 | Medium | 0.7% | 07 Jan, 2023 | Go github.com/agnivade/easy-scrypt |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0106, GHSA-8686-4cr3-76wj | Medium | 0.7% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0107, GHSA-pcvh-px2p-vmxw | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0108, GHSA-fpjc-cxr6-w6h8, GO-2023-1462 | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0110, GHSA-x22v-qgm2-7qc7, GO-2023-1469 | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0111, GHSA-h2ph-9r76-37v5, GO-2023-1465 | Medium | 0.5% | 07 Jan, 2023 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2023-0112, GHSA-9h7x-9pmh-7gg8, GO-2023-1461 | Medium | 0.6% | 07 Jan, 2023 | Go github.com/usememos/memos |
KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys CVE-2023-22463, GHSA-vjhf-8vqx-vqpq, GO-2023-1283 | Critical | 69.7% | 06 Jan, 2023 | Go github.com/KubeOperator/kubepi |
go-ipld-prime/codec/json may panic if asked to encode bytes CVE-2023-22460, GHSA-c653-6hhg-9x92, GO-2023-1269 | Medium | 1.2% | 05 Jan, 2023 | Go github.com/ipld/go-ipld-prime |
usememos/memos Cross-site Scripting vulnerability CVE-2022-4865, GHSA-8w5q-5fpq-v4pm | Critical | 1.1% | 31 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Cross-site Scripting CVE-2022-4866, GHSA-x9p9-v3x6-68mq | Critical | 1.1% | 31 Dec, 2022 | Go github.com/usememos/memos |
mellium.im/sasl authentication failure due to insufficient nonce randomness CVE-2022-48195, GHSA-gvfj-fxx3-j323, GO-2023-1268 | Critical | 0.9% | 31 Dec, 2022 | Go mellium.im/sasl |
usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges CVE-2022-4863, GHSA-6whj-8g9g-5jvx, GO-2023-1270 | Medium | 0.7% | 30 Dec, 2022 | Go github.com/usememos/memos |
efs-utils and aws-efs-csi-driver have race condition during concurrent TLS mounts CVE-2022-46174, GHSA-4fv8-w65m-3932 | Medium | 0.6% | 30 Dec, 2022 | Go github.com/kubernetes-sigs/aws-efs-csi-driver |
Elrond-GO processing: fallback search of SCRs when not found in the main cache CVE-2022-46173, GHSA-p228-4mrh-ww7r, GO-2022-1200 | High | 0.8% | 30 Dec, 2022 | Go github.com/ElrondNetwork/elrond-go |
pastebinit Path Traversal vulnerability CVE-2018-25059, GHSA-cwh7-28vg-jmpr, GO-2022-1212 | Medium | 0.8% | 30 Dec, 2022 | Go github.com/jessfraz/pastebinit |
Macaron csrf missing encryption and has sensitive cookies in HTTP session without secure attribute CVE-2018-25060, GHSA-hhxg-px5h-jc32, GO-2022-1213 | High | 0.6% | 30 Dec, 2022 | Go github.com/go-macaron/csrf |
gotify/server vulnerable to Cross-site Scripting in the application image file upload CVE-2022-46181, GHSA-xv6x-456v-24xh, GO-2022-1208 | Medium | 0.5% | 30 Dec, 2022 | Go github.com/gotify/server Go github.com/gotify/server/v2 |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4839, GHSA-gxqf-4g4p-q3hc | Medium | 0.8% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4840, GHSA-pwhr-p68w-296x | Medium | 0.7% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4841, GHSA-rmhx-9h5h-3xh3 | Medium | 0.6% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4844, GHSA-5jqp-wmhj-g33f | High | 0.3% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4845, GHSA-gw9m-2m5v-c6x5, GO-2022-1257 | Medium | 0.3% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4846, GHSA-cwrm-33qq-4w2x | Medium | 0.3% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos has Incorrectly Specified Destination in a Communication Channel CVE-2022-4847, GHSA-r7hg-2cpp-8wqq, GO-2022-1264 | Medium | 0.7% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel CVE-2022-4848, GHSA-vh43-cc6x-prpr, GO-2022-1266 | Medium | 0.6% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4849, GHSA-642q-2q68-9j3p, GO-2022-1250 | Medium | 0.4% | 29 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Cross-Site Request Forgery vulnerability CVE-2022-4850, GHSA-c5hq-35h7-r9x4 | Medium | 0.4% | 29 Dec, 2022 | Go github.com/usememos/memos |
sememos/memos vulnerable to Improper Handling of Values CVE-2022-4851, GHSA-42q2-m54f-jh95, GO-2023-1285 | Medium | 0.8% | 29 Dec, 2022 | Go github.com/usememos/memos |
Yapscan's report receiver server vulnerable to path traversal and log injection GHSA-9h6h-9g78-86f7, GO-2022-1204 | High | Not scored | 29 Dec, 2022 | Go github.com/fkie-cad/yapscan |
CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation CVE-2022-4318, GHSA-cm9x-c3rh-7rc4, GO-2022-1206 | Medium | 0.3% | 29 Dec, 2022 | Go github.com/cri-o/cri-o |
OpenShift OSIN vulnerable to Observable Timing Discrepancy CVE-2021-4294, GHSA-m7qp-cj9p-gj85, GO-2022-1201 | Medium | 0.7% | 28 Dec, 2022 | Go github.com/openshift/osin |
usememos/memos Incorrect Use of Privileged APIs vulnerability CVE-2022-4805, GHSA-mq5q-gpgv-pwxw, GO-2023-1292 | Medium | 0.5% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4806, GHSA-pp3p-6jjh-rmg7, GO-2022-1261 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4807, GHSA-gfj4-wg89-m22r, GO-2022-1256 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Privilege Management vulnerability CVE-2022-4808, GHSA-r3p3-5f35-h6mf, GO-2023-1449 | High | 0.4% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4809, GHSA-6w5w-wx8w-2cq9, GO-2022-1252 | High | 1.0% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4810, GHSA-qf9q-3wwx-8qjv, GO-2022-1263 | Medium | 0.5% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authorization vulnerability CVE-2022-4811, GHSA-hc5q-26h8-r9wf, GO-2022-1259 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Comparison of Object References Instead of Object Contents CVE-2022-4812, GHSA-m5pr-wm6q-x4g2, GO-2022-1260 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos has Insufficient Granularity of Access Control CVE-2022-4813, GHSA-7qpw-2j9m-rw8c, GO-2022-1253 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4814, GHSA-6fx9-29x2-fmfj, GO-2022-1251 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos makes Incorrect Use of Privileged APIs CVE-2022-4796, GHSA-ghx2-6v4g-9wmm, GO-2022-1236 | High | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |