Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts CVE-2022-4797, GHSA-qrrf-xvcf-p64q, GO-2022-1244 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authorization vulnerability CVE-2022-4798, GHSA-qcf5-m2c6-89f2, GO-2022-1243 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authentication vulnerability CVE-2022-4799, GHSA-jvq8-w7qv-hqp6, GO-2022-1239 | Medium | 0.8% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel CVE-2022-4800, GHSA-mfvq-m3jj-8864, GO-2022-1240 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos has Insufficient Granularity of Access Control CVE-2022-4801, GHSA-f83p-pg86-p922, GO-2022-1235 | Medium | 0.7% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to Improper Authorization CVE-2022-4802, GHSA-rx2m-xr4x-54hh, GO-2022-1248 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4803, GHSA-mfmp-8mqg-q4wm, GO-2023-1291 | High | 0.9% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Authorization vulnerability CVE-2022-4804, GHSA-qw36-rw5q-gxcq, GO-2022-1245 | Medium | 0.6% | 28 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4691, GHSA-97rc-mm5j-f6rj, GO-2022-1225 | Medium | 0.7% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4694, GHSA-v92p-phmp-xffr | Medium | 0.6% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4695, GHSA-c2v4-8r9g-g5xj | Medium | 0.7% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos may leak user information to an authenticated user CVE-2022-4734, GHSA-j593-h5v3-45x6, GO-2022-1220 | Medium | 0.8% | 27 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Denial of Service vulnerability CVE-2022-4767, GHSA-33m8-f4hw-wm3q, GO-2022-1219 | High | 0.7% | 27 Dec, 2022 | Go github.com/usememos/memos |
docconv vulnerable to Memory Allocation with Excessive Size Value CVE-2022-4741, GHSA-qvx2-59g8-8hph, GO-2022-1188 | Medium | 0.8% | 25 Dec, 2022 | Go code.sajari.com/docconv Go github.com/sajari/docconv |
Macaron i18n Open Redirect vulnerability CVE-2020-36627, GHSA-jwrv-x6rx-8vfm, GO-2022-1187 | Medium | 0.6% | 25 Dec, 2022 | Go github.com/go-macaron/i18n |
usememos/memos vulnerable to stored Cross-site Scripting CVE-2022-4692, GHSA-f552-97qx-c694, GO-2022-1216 | Medium | 0.6% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos missing Secure cookie attribute CVE-2022-4683, GHSA-qcw2-492v-57xj, GO-2022-1192 | Medium | 0.4% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Improper Access Control vulnerability CVE-2022-4684, GHSA-qr52-59r6-49f4, GO-2022-1218 | High | 0.6% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to improper access control CVE-2022-4685, GHSA-9v48-2h5x-fvpm, GO-2022-1205 | Medium | Not scored | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos Authorization Bypass Through User-Controlled Key vulnerability CVE-2022-4686, GHSA-68gw-r2x5-7r5r, GO-2022-1215 | Critical | 0.8% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos makes Incorrect Use of Privileged APIs CVE-2022-4687, GHSA-fv6c-rfg3-gvjw, GO-2022-1217 | High | 0.7% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to improper authorization CVE-2022-4688, GHSA-vwg4-846x-f94v, GO-2022-1190 | High | 0.8% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to account takeover due to improper access control CVE-2022-4689, GHSA-w57v-6xp4-rm2v, GO-2022-1191 | High | 0.8% | 23 Dec, 2022 | Go github.com/usememos/memos |
usememos/memos vulnerable to stored cross-site scripting (XSS) CVE-2022-4690, GHSA-c8jh-vcjh-fx2w, GO-2022-1189 | Medium | 0.6% | 23 Dec, 2022 | Go github.com/usememos/memos |
Collision of hash values in github.com/bnb-chain/tss-lib CVE-2022-47931, GHSA-cvcx-g7wh-x8rf, GO-2023-1904 | Critical | 0.5% | 23 Dec, 2022 | Go github.com/binance-chain/tss-lib Go github.com/bnb-chain/tss-lib |
destiny.gg chat vulnerable to cross-site request forgery CVE-2020-36625, GHSA-cjcc-46j8-xmr8 | High | 0.4% | 22 Dec, 2022 | Go github.com/destinygg/chat |
docconv OS Command Injection vulnerability CVE-2022-4643, GHSA-6m4h-hfpp-x8cx, GO-2022-1184 | Critical | 1.8% | 22 Dec, 2022 | Go code.sajari.com/docconv Go github.com/sajari/docconv |
leanote vulnerable to cross-site scripting CVE-2021-4263, GHSA-6cmv-2548-82v4 | Medium | 0.6% | 21 Dec, 2022 | Go github.com/leanote/leanote |
studygolang vulnerable to cross-site scripting CVE-2021-4272, GHSA-gw62-c7w4-x449 | Medium | 0.4% | 21 Dec, 2022 | Go github.com/studygolang/studygolang |
AAD Pod Identity obtaining token with backslash CVE-2022-23551, GHSA-p82q-rxpm-hjpc, GO-2022-1181 | Medium | 0.8% | 21 Dec, 2022 | Go github.com/Azure/aad-pod-identity |
kyverno verifyImages rule bypass possible with malicious proxy/registry BIT-kyverno-2022-47633, CVE-2022-47633, GHSA-m3cq-xcx9-3gvm, GO-2022-1180 | High | 1.0% | 21 Dec, 2022 | Go github.com/kyverno/kyverno |
OpenFGA Authorization Bypass CVE-2022-23542, GHSA-m3q4-7qmj-657m, GO-2022-1179 | High | 1.0% | 20 Dec, 2022 | Go github.com/openfga/openfga |
ghinstallation returns app JWT in error responses CVE-2022-39304, GHSA-h4q8-96p6-jcgr, GO-2022-1178 | Medium | 0.4% | 19 Dec, 2022 | Go github.com/bradleyfalzon/ghinstallation |
Cortex's Alertmanager can expose local files content via specially crafted config CVE-2022-23536, GHSA-cq2g-pw6q-hf7j, GO-2022-1175 | Medium | 0.8% | 19 Dec, 2022 | Go github.com/cortexproject/cortex |
Memos Cross-site Scripting vulnerability CVE-2022-4609, GHSA-rgj5-jj5q-v3v7 | Medium | 0.8% | 19 Dec, 2022 | Go github.com/usememos/memos |
Alist vulnerable to Path Traversal CVE-2022-45969, GHSA-pmg2-rph8-p8r6, GO-2022-1171 | Critical | 1.2% | 16 Dec, 2022 | Go github.com/alist-org/alist Go github.com/alist-org/alist/v3 |
Helm vulnerable to denial of service through schema file BIT-helm-2022-23526, CVE-2022-23526, GHSA-67fx-wx78-jx33, GO-2022-1166 | Medium | 0.9% | 14 Dec, 2022 | Go helm.sh/helm/v3 |
Helm vulnerable to denial of service through through repository index file BIT-helm-2022-23525, CVE-2022-23525, GHSA-53c4-hhmh-vw5q, GO-2022-1165 | Medium | 0.9% | 14 Dec, 2022 | Go helm.sh/helm/v3 |
Helm vulnerable to denial of service through string value parsing BIT-helm-2022-23524, CVE-2022-23524, GHSA-6rx9-889q-vv2r, GO-2022-1167 | Medium | 0.8% | 14 Dec, 2022 | Go helm.sh/helm/v3 |
csaf-poc/csaf_distribution Cross-site Scripting vulnerability CVE-2022-43996, GHSA-xxfx-w2rw-gh63, GO-2022-1164 | Medium | 0.5% | 14 Dec, 2022 | Go github.com/csaf-poc/csaf_distribution |
AList vulnerable to Improper Preservation of Permissions CVE-2022-45968, GHSA-4gjr-vgfx-9qvw, GO-2022-1161 | High | 1.0% | 12 Dec, 2022 | Go github.com/alist-org/alist Go github.com/alist-org/alist/v3 |
Alist Cross-site Scripting vulnerability CVE-2022-45970, GHSA-957m-g6rf-4c2m | Medium | 0.5% | 12 Dec, 2022 | Go github.com/alist-org/alist/v3 |
Amazon CloudWatch Agent for Windows has Privilege Escalation Vector CVE-2022-23511, GHSA-j8x2-2m5w-j939, GO-2022-1160 | High | 0.5% | 12 Dec, 2022 | Go github.com/aws/amazon-cloudwatch-agent |
golang.org/x/net/http2 vulnerable to possible excessive memory growth BIT-golang-2022-41717, CVE-2022-41717, GHSA-xrjj-mj9h-534m, GO-2022-1144 | Medium | 6.1% | 08 Dec, 2022 | Go golang.org/x/net Go golang.org/x/net/http2 Go stdlib |
Buildah (as part of Podman) vulnerable to Link Following CVE-2022-4122, GHSA-4crw-w8pw-2hmf, GO-2022-1151 | Medium | 0.9% | 08 Dec, 2022 | Go github.com/containers/podman Go github.com/containers/podman/v2 Go github.com/containers/podman/v3 Go github.com/containers/podman/v4 |
Buildah (as part of Podman) vulnerable to Path Traversal CVE-2022-4123, GHSA-rprg-4v7q-87v7, GO-2022-1159 | Low | 0.2% | 08 Dec, 2022 | Go github.com/containers/podman/v4 |
go-merkledag's ProtoNode may be modified such that common method calls may panic CVE-2022-23495, GHSA-x39j-h85h-3f46, GO-2022-1155 | High | 1.4% | 08 Dec, 2022 | Go github.com/ipfs/go-merkledag |
Traefik may display authorization header in the debug logs CVE-2022-23469, GHSA-h2ph-vhm7-g4hp, GO-2022-1154 | Low | 1.0% | 08 Dec, 2022 | Go github.com/traefik/traefik Go github.com/traefik/traefik/v2 |
Traefik routes exposed with an empty TLSOption CVE-2022-46153, GHSA-468w-8x39-gj5v, GO-2022-1152 | Medium | 0.5% | 08 Dec, 2022 | Go github.com/traefik/traefik Go github.com/traefik/traefik/v2 |
containerd CRI stream server vulnerable to host memory exhaustion via terminal CVE-2022-23471, GHSA-2qjp-425j-52j9, GO-2022-1147 | Medium | 1.1% | 07 Dec, 2022 | Go github.com/containerd/containerd |