Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
SQLinjection in falcon-plus CVE-2022-26245, GHSA-76j4-gggq-7rg9 | Critical | 13.8% | 28 Mar, 2022 | Go github.com/open-falcon/falcon-plus |
Gitea Open Redirect BIT-gitea-2022-1058, CVE-2022-1058, GHSA-4rqq-rxvc-v2rc, GO-2024-2752 | Medium | 53.2% | 25 Mar, 2022 | Go code.gitea.io/gitea |
Improper access control allows admin privilege escalation in Argo CD CVE-2022-1025, CVE-2022-24768, GHSA-2f5v-8r3f-8pww, GHSA-96jv-vj39-x4j6, GO-2022-0359, GO-2022-0516 | Critical | 1.3% | 24 Mar, 2022 | Go github.com/argoproj/argo-cd Go github.com/argoproj/argo-cd/v2 |
Path traversal allows leaking out-of-bound files from Argo CD repo-server CVE-2022-24731, GHSA-h6h5-6fmq-rh28, GO-2022-0358 | Medium | 1.0% | 24 Mar, 2022 | Go github.com/argoproj/argo-cd Go github.com/argoproj/argo-cd/v2 |
Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server CVE-2022-24730, GHSA-r9cr-hvjj-496v, GO-2022-0357 | High | 0.9% | 24 Mar, 2022 | Go github.com/argoproj/argo-cd Go github.com/argoproj/argo-cd/v2 |
golang.org/x/crypto/ssh Denial of service via crafted Signer CVE-2022-27191, GHSA-8c26-wmh5-6g9v, GO-2021-0356 | High | 4.0% | 19 Mar, 2022 | Go golang.org/x/crypto |
Denial of service in go-ethereum CVE-2021-42219, GHSA-vrcc-g6vj-mh5w | High | 1.2% | 18 Mar, 2022 | Go github.com/ethereum/go-ethereum |
Path traversal in github.com/valyala/fasthttp CVE-2022-21221, GHSA-fx95-883v-4q4h, GO-2022-0355, SNYK-GOLANG-GITHUBCOMVALYALAFASTHTTP-2407866 | High | 2.5% | 18 Mar, 2022 | Go github.com/valyala/fasthttp |
Path Traversal in Gitea BIT-gitea-2021-29134, CVE-2021-29134, GHSA-h3q4-vmw4-cpr5, GO-2022-0353 | Medium | 1.5% | 16 Mar, 2022 | Go code.gitea.io/gitea |
Code Injection in CRI-O CVE-2022-0811, GHSA-6x2m-w449-qwx7, GO-2022-0354 | High | 19.0% | 15 Mar, 2022 | Go github.com/cri-o/cri-o |
Sysctls applied to containers with host IPC or host network namespaces can affect the host GHSA-w2j5-3rcx-vx7x, GO-2022-0363 | Medium | Not scored | 15 Mar, 2022 | Go github.com/cri-o/cri-o |
Gogs vulnerable to improper PAM authorization handling CVE-2022-0871, GHSA-gw5h-h6hj-f56g, GO-2022-0369 | High | 1.2% | 14 Mar, 2022 | Go gogs.io/gogs |
SSRF in repository migration GHSA-q347-cg56-pcq4, GO-2022-0377 | Medium | Not scored | 14 Mar, 2022 | Go gogs.io/gogs |
Cross-site Scripting in Alist CVE-2022-26533, GHSA-jpj5-hg26-6jgc | Medium | 0.7% | 13 Mar, 2022 | Go github.com/Xhofe/alist |
SSRF in repository migration CVE-2022-0870, GHSA-7v5r-r995-q2x2, GO-2022-0566 | Medium | 3.4% | 12 Mar, 2022 | Go gogs.io/gogs |
Gitea Missing Authorization vulnerability BIT-gitea-2022-0905, CVE-2022-0905, GHSA-jr9c-h74f-2v28, GO-2022-0609 | High | 0.8% | 11 Mar, 2022 | Go code.gitea.io/gitea |
Command Injection in CasaOS CVE-2022-24193, GHSA-jh63-28gx-7p26, GO-2022-0606 | Critical | 5.5% | 11 Mar, 2022 | Go github.com/IceWhaleTech/CasaOS |
Arbitrary file write in nats-server BIT-nats-2022-26652, CVE-2022-26652, GHSA-6h3m-36w8-hv68, GO-2022-0351 | High | 2.3% | 10 Mar, 2022 | Go github.com/nats-io/nats-server Go github.com/nats-io/nats-server/v2 Go github.com/nats-io/nats-streaming-server |
Code injection in Stripe CLI on windows CVE-2022-24753, GHSA-4cx6-fj7j-pjx9, GO-2022-0350 | High | 0.4% | 10 Mar, 2022 | Go github.com/stripe/stripe-cli |
Account compromise in Evmos CVE-2022-24738, GHSA-5jgq-x857-p8xw, GO-2022-0348 | High | 1.1% | 07 Mar, 2022 | Go github.com/tharsis/evmos Go github.com/tharsis/evmos/v2 |
Use of a Key Past its Expiration Date and Insufficient Session Expiration in Maddy Mail Server CVE-2022-24732, GHSA-6cp7-g972-w9m9 | Medium | 0.4% | 07 Mar, 2022 | Go github.com/foxcpp/maddy |
Denial of Service in Go-Ethereum CVE-2022-23327, GHSA-pvx3-gm3c-gmpr | High | 1.4% | 05 Mar, 2022 | Go github.com/ethereum/go-ethereum |
Denial of Service in Go-Ethereum CVE-2022-23328, GHSA-vmf7-hmh6-vv57 | High | 1.4% | 05 Mar, 2022 | Go github.com/ethereum/go-ethereum |
Path traversal in claircore CVE-2021-3762, GHSA-mq47-6wwv-v79w, GO-2022-0346 | High | 4.8% | 04 Mar, 2022 | Go github.com/quay/claircore |
containerd CRI plugin: Insecure handling of image volumes CVE-2022-23648, GHSA-crp2-qrr5-8pq7, GO-2022-0344 | High | 27.4% | 02 Mar, 2022 | Go github.com/containerd/containerd |
Multiple security issues in Pomerium's embedded envoy GHSA-j34v-3552-5r7j | Medium | Not scored | 01 Mar, 2022 | Go github.com/pomerium/pomerium |
Possible privilege escalation via bash completion script GHSA-w4f8-fxq2-j35v | Medium | Not scored | 01 Mar, 2022 | Go github.com/google/fscrypt |
Improper random number generation in github.com/coredns/coredns GHSA-gv9j-4w24-q7vx, GO-2022-0368 | Medium | Not scored | 01 Mar, 2022 | Go github.com/coredns/coredns |
HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling CVE-2022-24685, GHSA-3382-r9q8-4hfg, GO-2022-0577 | High | 1.5% | 01 Mar, 2022 | Go github.com/hashicorp/nomad |
Possible filesystem space exhaustion by local users CVE-2022-25326, GHSA-chxf-fjcf-7fwp, GHSA-mpq4-rjj8-fjph, GO-2022-0339 | Medium | 0.1% | 26 Feb, 2022 | Go github.com/google/fscrypt |
User login denial of service in github.com/google/fscrypt CVE-2022-25327, GHSA-8vwm-8vj8-rqjf, GHSA-p93v-m2r2-4387, GO-2022-0340 | Medium | 0.1% | 26 Feb, 2022 | Go github.com/google/fscrypt |
Command injection in github.com/google/fscrypt CVE-2022-25328, GHSA-wxjg-p59j-6c92 | Medium | 0.2% | 26 Feb, 2022 | Go github.com/google/fscrypt |
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers BIT-consul-2022-24687, CVE-2022-24687, GHSA-hj93-5fg3-3chr, GO-2022-0953 | Medium | 1.5% | 25 Feb, 2022 | Go github.com/hashicorp/consul |
Off-by-one Error in v2fly/v2ray-core CVE-2021-4070, GHSA-4cxw-hq44-r344, GO-2022-0550 | Critical | 0.9% | 24 Feb, 2022 | Go github.com/v2fly/v2ray-core Go github.com/v2fly/v2ray-core/v4 |
Improper Authentication in Capsule Proxy CVE-2022-23652, GHSA-9cwv-cppx-mqjm, GO-2022-0329 | High | 1.4% | 23 Feb, 2022 | Go github.com/clastix/capsule-proxy |
Unauthenticated control plane denial of service attack in Istio CVE-2022-23635, GHSA-856q-xv3c-7f2f | High | 1.7% | 23 Feb, 2022 | Go istio.io/istio |
Use of Hard-coded Cryptographic Key in Netmaker CVE-2022-23650, GHSA-86f3-hf24-76q4, GO-2022-0328 | High | 1.6% | 22 Feb, 2022 | Go github.com/gravitl/netmaker |
Improper Certificate Validation in Cosign BIT-cosign-2022-23649, CVE-2022-23649, GHSA-ccxc-vr6p-4858, GO-2022-0326 | Low | 0.2% | 22 Feb, 2022 | Go github.com/sigstore/cosign |
Use of Hard-coded Cryptographic Key in Netmaker CVE-2022-0664, GHSA-6rrw-4fm9-rghv, GO-2022-0561 | High | 1.7% | 19 Feb, 2022 | Go github.com/gravitl/netmaker |
Arbitrary file reads in HashiCorp Nomad CVE-2022-24683, GHSA-wmrx-57hm-mw7r, GO-2022-0584 | High | 1.5% | 18 Feb, 2022 | Go github.com/hashicorp/nomad |
Certificate verification error on Windows in crypto/x509 BIT-golang-2020-14039, CVE-2020-14039, GO-2021-0223 | 1.8% | 17 Feb, 2022 | Go stdlib | |
Data race and crash in net/http BIT-golang-2020-15586, CVE-2020-15586, GO-2021-0224 | 2.9% | 17 Feb, 2022 | Go stdlib | |
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability CVE-2020-29652, GHSA-3vm4-22fp-5rfm, GO-2021-0227 | High | 3.2% | 17 Feb, 2022 | Go golang.org/x/crypto |
Infinite loop when decoding inputs in encoding/xml BIT-golang-2021-27918, CVE-2021-27918, GO-2021-0234 | 2.5% | 17 Feb, 2022 | Go stdlib | |
Incorrect operations on the P-224 curve in crypto/elliptic BIT-golang-2021-3114, CVE-2021-3114, GO-2021-0235 | 2.7% | 17 Feb, 2022 | Go stdlib | |
golang.org/x/net/html Infinite Loop vulnerability BIT-golang-2021-33194, CVE-2021-33194, GHSA-83g2-8m93-v3w7, GO-2021-0238 | High | 7.5% | 17 Feb, 2022 | Go golang.org/x/net |
Improper sanitization when resolving values from DNS in net BIT-golang-2021-33195, CVE-2021-33195, GO-2021-0239 | 3.2% | 17 Feb, 2022 | Go stdlib | |
Panic when reading certain archives in archive/zip BIT-golang-2021-33196, CVE-2021-33196, GO-2021-0240 | 3.5% | 17 Feb, 2022 | Go stdlib | |
Attacker can drop certain headers in net/http/httputil BIT-golang-2021-33197, CVE-2021-33197, GO-2021-0241 | 2.3% | 17 Feb, 2022 | Go stdlib | |
Panic on inputs with large exponents in math/big BIT-golang-2021-33198, CVE-2021-33198, GO-2021-0242 | 3.4% | 17 Feb, 2022 | Go stdlib |