Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
DevSpace vulnerable to remote code execution CVE-2020-15391, GHSA-6h8c-gw33-cjm2 | Critical | 2.7% | 24 May, 2022 | Go github.com/loft-sh/devspace |
Mattermost Server Sensitive Data Exposure BIT-mattermost-2020-14457, CVE-2020-14457, GHSA-j2h2-cvwh-cr64, GO-2023-1939 | Medium | 0.9% | 24 May, 2022 | Go github.com/mattermost/mattermost Go github.com/mattermost/mattermost-server Go github.com/mattermost/mattermost-server/v5 |
Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command CVE-2018-21258, GHSA-5mh6-p63g-3mv5, GO-2025-4146 | High | 1.2% | 24 May, 2022 | Go github.com/mattermost/mattermost-server Go github.com/mattermost/mattermost-server/v5 |
containernetworking/plugins vulnerable to MitM attacks CVE-2020-10749, GHSA-fx6x-h9g4-56f8, GO-2023-1915 | Medium | 2.1% | 24 May, 2022 | Go github.com/containernetworking/plugins |
Grafana XSS via the OpenTSDB datasource BIT-grafana-2020-13430, CVE-2020-13430, GHSA-7m2x-qhrq-rp8h, GO-2024-2515 | Medium | 1.9% | 24 May, 2022 | Go github.com/grafana/grafana |
Grafana information disclosure BIT-grafana-2020-12458, CVE-2020-12458, GHSA-3jq7-8ph8-63xm, GO-2024-2513 | High | 0.5% | 24 May, 2022 | Go github.com/grafana/grafana |
Grafana world readable configuration files BIT-grafana-2020-12459, CVE-2020-12459, GHSA-m25m-5778-fm22, GO-2024-2519 | High | 0.3% | 24 May, 2022 | Go github.com/grafana/grafana |
Grafana XSS in header column rename BIT-grafana-2020-12245, CVE-2020-12245, GHSA-ccmg-w4xm-p28v, GO-2024-2517 | Medium | 2.0% | 24 May, 2022 | Go github.com/grafana/grafana |
Argo Exposure of Sensitive Information CVE-2018-21034, GHSA-xj7v-c82w-92q2, GO-2023-1952 | Medium | 1.4% | 24 May, 2022 | Go github.com/argoproj/argo-cd |
Podman has Files or Directories Accessible to External Parties CVE-2020-1726, GHSA-vmhj-p9hw-vgrf, GO-2023-1544 | Medium | 1.8% | 24 May, 2022 | Go github.com/containers/libpod Go github.com/containers/libpod/v2 Go github.com/containers/podman Go github.com/containers/podman/v2 |
Singularity insecure permissions CVE-2019-19724, GHSA-mj73-5x75-9phh | High | 1.2% | 24 May, 2022 | Go github.com/sylabs/singularity |
Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access CVE-2019-11255, GHSA-f4w6-3rh6-6q4q | Medium | 2.0% | 24 May, 2022 | Go github.com/kubernetes-csi/external-provisioner Go github.com/kubernetes-csi/external-resizer Go github.com/kubernetes-csi/external-snapshotter/v6 |
Podman Symlink Vulnerability CVE-2019-18466, GHSA-r34v-gqmw-qvgj, GO-2023-1942 | Medium | 1.4% | 24 May, 2022 | Go github.com/containers/libpod Go github.com/containers/podman Go github.com/containers/podman/v2 Go github.com/containers/podman/v3 +1 more |
Gophish XSS Vulnerability CVE-2019-16146, GHSA-9h9f-9q8g-6764, GO-2023-1936 | Medium | 0.7% | 24 May, 2022 | Go github.com/gophish/gophish |
Kubernetes kube-apiserver unauthorized access CVE-2019-11247, GHSA-fp37-c92q-4pwq | High | 2.1% | 24 May, 2022 | Go k8s.io/apiextensions-apiserver |
cnlh nps vulnerable to file overwrite by local user CVE-2019-15119, GHSA-2vp2-8m5j-4rjx, GO-2025-3625 | Medium | 1.0% | 24 May, 2022 | Go ehang.io/nps Go github.com/cnlh/nps |
golang.org/x/net/http vulnerable to a reset flood CVE-2019-9512, CVE-2019-9514, GHSA-39qc-96h7-956f, GHSA-hgr8-6h9x-f7q9, GO-2022-0536 | High | 83.4% | 24 May, 2022 | Go golang.org/x/net Go stdlib |
Istio ReDoS Vulnerability CVE-2019-14993, GHSA-qcvw-82hh-gq38 | High | 2.3% | 24 May, 2022 | Go istio.io/istio |
Hashicorp Nomad Access Control Issues CVE-2019-12618, GHSA-2w2v-xcr9-mj4m, GO-2023-1928 | Critical | 2.4% | 24 May, 2022 | Go github.com/hashicorp/nomad |
Podman Path Traversal Vulnerability leads to arbitrary file read/write CVE-2019-10152, GHSA-rh5f-2w6r-q7vj, GO-2023-1927 | High | 0.5% | 24 May, 2022 | Go github.com/containers/podman |
Rancher Recreates Default User With Known Password Despite Deletion CVE-2019-11202, GHSA-xh8x-j8h3-m5ph, GO-2024-2784 | Critical | 1.6% | 24 May, 2022 | Go github.com/rancher/rancher |
Moby Docker cp broken with debian containers CVE-2019-14271, GHSA-v2cv-wwxq-qq97, GO-2024-2521 | Critical | 18.8% | 24 May, 2022 | Go github.com/docker/docker Go github.com/moby/moby |
mastercactapus proxyprotocol vulnerable to denial of service CVE-2019-14243, GHSA-85c5-ccm8-vr96, GO-2023-1923 | High | 4.3% | 24 May, 2022 | Go github.com/mastercactapus/proxyprotocol |
Gitea XSS Vulnerability CVE-2019-1010261, GHSA-5rh7-6gfj-mc87, GO-2023-1922 | Medium | 0.8% | 24 May, 2022 | Go code.gitea.io/gitea |
Secret insertion into debug log in Docker CVE-2019-13509, GHSA-j249-ghv5-7mxv | High | 3.7% | 24 May, 2022 | Go github.com/docker/docker |
b3log Wide unauthenticated file access CVE-2019-13915, GHSA-6452-jr93-r5qm, GO-2023-1924 | High | 2.6% | 24 May, 2022 | Go github.com/b3log/wide |
Helm Improper Certificate Validation CVE-2019-1010275, GHSA-x6r5-vxfg-gq3v, GO-2023-1993 | Critical | 1.4% | 24 May, 2022 | Go helm.sh/helm |
Gitea XSS Vulnerability in Repository Description CVE-2019-1010314, GHSA-hqx2-j33x-9fc4 | Medium | 0.8% | 24 May, 2022 | Go code.gitea.io/gitea |
Grafana Cross-site Scripting vulnerability CVE-2019-13068, GHSA-7phr-6cc9-4m5q | Medium | 51.9% | 24 May, 2022 | Go github.com/grafana/grafana |
Rancher Login Parameter Can Be Edited CVE-2019-11881, GHSA-2p4g-jrmx-r34m, GO-2024-2761 | Medium | 2.0% | 24 May, 2022 | Go github.com/rancher/rancher |
Rancher Privilege Escalation Vulnerability CVE-2019-12274, GHSA-gc62-j469-9gjm, GO-2023-1991 | High | 1.1% | 24 May, 2022 | Go github.com/rancher/rancher |
Rancher code injection via fluentd config commands CVE-2019-12303, GHSA-53pj-67m4-9w98, GO-2024-2762 | High | 2.0% | 24 May, 2022 | Go github.com/rancher/rancher |
Containous Traefik Exposes Password Hashes CVE-2019-12452, GHSA-r3fq-cmmw-cpmm, GO-2023-1919 | High | 2.5% | 24 May, 2022 | Go github.com/traefik/traefik |
Golang/x/crypto message forgery vulnerability CVE-2019-11841, GHSA-x3jr-pf6g-c48f, GO-2023-1992 | Medium | 2.0% | 24 May, 2022 | Go golang.org/x/crypto |
golang.org/x/crypto/salsa20/salsa uses insufficiently random values CVE-2019-11840, GHSA-r5c5-pr8j-pfp7, GO-2022-0209 | Medium | 3.5% | 24 May, 2022 | Go golang.org/x/crypto |
Gitea Allows 1FA Even for 2FA-Enrolled Accounts CVE-2019-11576, GHSA-3393-r4p5-vhqh | Critical | 1.8% | 24 May, 2022 | Go code.gitea.io/gitea |
EnvoyProxy Envoy Missing HTTP URL path normalization CVE-2019-9901, GHSA-2wmf-p7f8-w42h, GHSA-xcx5-93pw-jw2w | Critical | 5.0% | 24 May, 2022 | Go github.com/envoyproxy/envoy |
Kubernetes did not effectively clear service account credentials CVE-2019-11243, GHSA-gc2p-g4fg-29vh, GO-2025-3645 | High | 1.5% | 24 May, 2022 | Go k8s.io/kubernetes |
Denial of service affecting P-521 and P-384 curves in crypto/elliptic CVE-2019-6486, GO-2022-0217 | 4.5% | 24 May, 2022 | Go stdlib | |
Login screen allows message spoofing if SSO is enabled CVE-2022-24905, GHSA-xmg8-99r8-jc2j, GO-2022-0454 | Medium | 1.3% | 24 May, 2022 | Go github.com/argoproj/argo-cd Go github.com/argoproj/argo-cd/v2 |
Request smuggling due to accepting invalid headers in net/http via net/textproto CVE-2019-16276, GO-2022-0212 | 5.3% | 23 May, 2022 | Go stdlib | |
Stack exhaustion when compiling deeply nested expressions in regexp BIT-golang-2022-24921, CVE-2022-24921, GO-2021-0347 | 3.2% | 23 May, 2022 | Go stdlib | |
Uncontrolled memory consumption in math/big BIT-golang-2022-23772, CVE-2022-23772, GO-2021-0317 | 2.8% | 23 May, 2022 | Go stdlib | |
Incorrect computation for some invalid field elements in crypto/elliptic BIT-golang-2022-23806, CVE-2022-23806, GO-2021-0319 | 3.1% | 23 May, 2022 | Go stdlib | |
Panic during certificate parsing on Darwin in crypto/x509 BIT-golang-2022-27536, CVE-2022-27536, GO-2022-0434 | 1.5% | 23 May, 2022 | Go stdlib | |
Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server CVE-2022-24904, GHSA-6gcg-hp2x-q54h, GO-2022-0453 | Medium | 1.2% | 23 May, 2022 | Go github.com/argoproj/argo-cd Go github.com/argoproj/argo-cd/v2 |
Malicious HTML+XHR Artifact Privilege Escalation in Argo Workflows BIT-argo-workflows-2022-29164, CVE-2022-29164, GHSA-cmv8-6362-r5w9 | High | 0.9% | 23 May, 2022 | Go github.com/argoproj/argo-workflows/v3 |
Access control bypass in beego CVE-2022-31259, GHSA-qx32-f6g6-fcfr, GO-2022-0463 | Critical | 22.2% | 22 May, 2022 | Go github.com/astaxie/beego Go github.com/beego/beego Go github.com/beego/beego/v2 |
Panic due to large inputs affecting P-256 curves in crypto/elliptic BIT-golang-2022-28327, CVE-2022-28327, GO-2022-0435 | 4.2% | 20 May, 2022 | Go stdlib | |
Stack overflow from a large amount of PEM data in encoding/pem BIT-golang-2022-24675, CVE-2022-24675, GO-2022-0433 | 10.0% | 20 May, 2022 | Go stdlib |