Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Panic on certain certificates in crypto/tls BIT-golang-2021-34558, CVE-2021-34558, GO-2021-0243 | 7.0% | 17 Feb, 2022 | Go stdlib | |
Panic in ReverseProxy in net/http/httputil BIT-golang-2021-36221, CVE-2021-36221, GO-2021-0245 | 3.1% | 17 Feb, 2022 | Go stdlib | |
Skip the router TLS configuration when the host header is an FQDN CVE-2022-23632, GHSA-hrhx-6h34-j5hc, GO-2022-0325 | High | 1.7% | 16 Feb, 2022 | Go github.com/traefik/traefik Go github.com/traefik/traefik/v2 |
Uncontrolled Resource Consumption in promhttp CVE-2022-21698, GHSA-cg3q-j54f-5p7p, GO-2022-0322 | High | 6.0% | 16 Feb, 2022 | Go github.com/prometheus/client_golang |
Nomad Spread Job Stanza May Trigger Panic in Servers CVE-2022-24684, GHSA-6jm6-cmcp-fqjq, GO-2022-0560 | Medium | 1.4% | 16 Feb, 2022 | Go github.com/hashicorp/nomad |
Symlink Attack in kubectl cp CVE-2019-1002101, GHSA-34jx-wx69-9x8v, GO-2022-0782 | Medium | 12.8% | 15 Feb, 2022 | Go k8s.io/kubernetes |
Gitea Improper Input Validation CVE-2019-11228, GHSA-q47x-6mqq-4w92, GO-2022-0862 | High | 1.3% | 15 Feb, 2022 | Go github.com/go-gitea/gitea |
Gitea Remote Code Execution CVE-2019-11229, GHSA-hpmr-prr2-cqc4, GO-2022-0846 | High | 55.0% | 15 Feb, 2022 | Go github.com/go-gitea/gitea |
Kubernetes Unsafe Cacheing CVE-2019-11244, GHSA-2575-pghm-6qqx | Medium | 0.5% | 15 Feb, 2022 | Go k8s.io/client-go |
Istio may not check inbound TCP connections against istio-policy CVE-2019-12243, GHSA-6g5f-f5pm-mjrg | High | 1.2% | 15 Feb, 2022 | Go istio.io/istio |
Hashicorp Nomad Information Exposure Through Environmental Variables CVE-2019-14802, GHSA-6hv3-7c34-4hx8, GO-2022-0634 | Medium | 0.6% | 15 Feb, 2022 | Go github.com/hashicorp/nomad |
Missing Authorization in Harbor CVE-2019-16097, GHSA-9wvh-ff5f-xjpj, GO-2022-0818 | Medium | 22.4% | 15 Feb, 2022 | Go github.com/goharbor/harbor |
Pivotal Concourse SQL Injection Vulnerability CVE-2019-3792, GHSA-4fqx-74rv-638w | High | 1.1% | 15 Feb, 2022 | Go github.com/concourse/concourse |
SQL Injection in Couchbase Sync Gateway CVE-2019-9039, GHSA-g622-r636-qfqh | Critical | 2.7% | 15 Feb, 2022 | Go github.com/couchbase/sync_gateway |
Denial of Service (DoS) in HashiCorp Consul BIT-consul-2020-12758, CVE-2020-12758, GHSA-q2qr-3c2p-9235, GO-2022-0861 | Medium | 1.7% | 15 Feb, 2022 | Go github.com/hashicorp/consul |
Server Side Request Forgery in Grafana BIT-grafana-2020-13379, CVE-2020-13379, GHSA-wc9w-wvq2-ffm9 | Medium | 99.9% | 15 Feb, 2022 | Go github.com/grafana/grafana |
Improper Input Validation in Docker Engine CVE-2020-13401, GHSA-qrrc-ww9x-r43g | Medium | 2.9% | 15 Feb, 2022 | Go github.com/docker/docker-ce |
Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information Into Sent Data in Calico CVE-2020-13597, GHSA-pf59-j7c2-rh6x | Medium | 0.9% | 15 Feb, 2022 | Go github.com/projectcalico/calico |
Authorization bypass in Istio CVE-2020-16844, GHSA-82mm-ffjr-h86c | Medium | 1.1% | 15 Feb, 2022 | Go istio.io/istio |
Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers CVE-2020-2023, GHSA-6978-vg2j-cc9q | Medium | 1.1% | 15 Feb, 2022 | Go github.com/kata-containers/agent Go github.com/kata-containers/runtime |
Link Following in Kata Runtime CVE-2020-2026, GHSA-877x-32pm-p28x | High | 0.5% | 15 Feb, 2022 | Go github.com/kata-containers/runtime |
Improper Input Validation in vault-ssh-helper CVE-2020-24359, GHSA-f9fq-vjvh-779p, GO-2022-0824 | High | 1.0% | 15 Feb, 2022 | Go github.com/hashicorp/vault-ssh-helper |
Use After Free in HashiCorp Nomad CVE-2020-27195, GHSA-77cr-6gr8-7rr9, GO-2022-0806 | Critical | 1.5% | 15 Feb, 2022 | Go github.com/hashicorp/nomad |
Path Traversal in HashiCorp Nomad CVE-2020-28348, GHSA-5x92-p4p5-33c4, GO-2022-0770 | Medium | 1.7% | 15 Feb, 2022 | Go github.com/hashicorp/nomad |
Denial of service in github.com/nats-io/nats-server/server BIT-nats-2020-28466, CVE-2020-28466, GHSA-m4jx-6526-vvhm, GO-2022-0855, SNYK-GOLANG-GITHUBCOMNATSIONATSSERVERSERVER-1042967 | High | 3.7% | 15 Feb, 2022 | Go github.com/nats-io/nats-server Go github.com/nats-io/nats-server/v2 |
Cryptographic Issues in ECK CVE-2020-7010, GHSA-vfp4-xx6m-7vf6 | High | 1.4% | 15 Feb, 2022 | Go github.com/elastic/cloud-on-k8s |
Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes CVE-2020-8551, GHSA-qhm4-jxv7-j9pq, GO-2022-0867 | Medium | 1.2% | 15 Feb, 2022 | Go k8s.io/kubernetes |
Kubernetes API Server DoS Via API Requests CVE-2020-8552, GHSA-82hx-w2r5-c2wq | Medium | 2.8% | 15 Feb, 2022 | Go k8s.io/apiserver |
Server Side Request Forgery (SSRF) in Kubernetes CVE-2020-8555, GHSA-x6mj-w4jf-jmgw, GO-2022-0890 | Medium | 3.7% | 15 Feb, 2022 | Go k8s.io/kubernetes |
Improper Authentication in Kubernetes CVE-2020-8558, GHSA-wqv3-8cm6-h6wg, GO-2022-0885 | High | 3.4% | 15 Feb, 2022 | Go k8s.io/kubernetes |
Directory traversal in Kubernetes Secrets Store CSI Driver CVE-2020-8568, GHSA-5cgx-vhfp-6cf9, GO-2022-0629 | Medium | 1.3% | 15 Feb, 2022 | Go sigs.k8s.io/secrets-store-csi-driver |
NULL Pointer Dereference in Kubernetes CSI snapshot-controller CVE-2020-8569, GHSA-hwrr-rhmm-vcvf | Medium | 2.2% | 15 Feb, 2022 | Go github.com/kubernetes-csi/external-snapshotter/v2 Go github.com/kubernetes-csi/external-snapshotter/v3 |
containernetworking/cni improper limitation of path name CVE-2021-20206, GHSA-xjqr-g762-pxwp, GO-2022-0230, SNYK-GOLANG-GITHUBCOMCONTAINERNETWORKINGCNIPKGINVOKE-1070549 | High | 1.5% | 15 Feb, 2022 | Go github.com/containernetworking/cni |
Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server CVE-2021-21403, GHSA-8wrg-m8vm-5fvj | High | 1.4% | 15 Feb, 2022 | Go github.com/kongchuanhujiao/server |
Reject unauthorized access with GitHub PATs CVE-2021-21432, GHSA-8j3f-mhq8-gmh4, GO-2022-0812 | High | 1.0% | 15 Feb, 2022 | Go github.com/go-vela/server |
Authentication bypass by capture-replay in github.com/cosmos/ethermint CVE-2021-25834, GHSA-93p5-8fqw-wjx3, GO-2022-0813 | High | 1.2% | 15 Feb, 2022 | Go github.com/cosmos/ethermint |
Authentication bypass by capture-replay in github.com/cosmos/ethermint CVE-2021-25835, GHSA-x5f3-qmwj-4f84, GO-2022-0889 | High | 1.3% | 15 Feb, 2022 | Go github.com/cosmos/ethermint |
Denial of service in Grafana BIT-grafana-2021-27358, CVE-2021-27358, GHSA-h5rh-w6vm-9ghc | Medium | 83.0% | 15 Feb, 2022 | Go github.com/grafana/grafana |
Infinite loop in Yubico yubihsm-connector CVE-2021-28484, GHSA-8m9g-647g-5pxw | High | 1.5% | 15 Feb, 2022 | Go github.com/Yubico/yubihsm-connector |
Noise vulnerable to denial of service CVE-2021-4239, GHSA-6cr6-fmvc-vw2p, GHSA-g9mp-8g3h-3c5c, GO-2022-0425 | High | 0.4% | 15 Feb, 2022 | Go github.com/flynn/noise |
On Windows, `git-sizer` might run a `git` executable within the repository being analyzed GHSA-57q7-rxqq-7vgp, GO-2022-0424 | Medium | Not scored | 15 Feb, 2022 | Go github.com/github/git-sizer |
Improper input validation in umoci CVE-2021-29136, GHSA-9m95-8hx6-7p9v, GO-2022-0815 | Medium | 0.3% | 15 Feb, 2022 | Go github.com/opencontainers/umoci |
Denial of Service in Gitea BIT-gitea-2020-13246, CVE-2020-13246, GHSA-g2qx-6ghw-67hm, GO-2022-0830 | High | 2.0% | 15 Feb, 2022 | Go code.gitea.io/gitea Go github.com/go-gitea/gitea |
Exposure of server configuration in github.com/go-vela/server CVE-2020-26294, GHSA-gv2h-gf8m-r68j, GO-2022-0838 | High | 1.8% | 15 Feb, 2022 | Go github.com/go-vela/compiler |
HashiCorp Nomad Artifact Download Race Condition CVE-2022-24686, GHSA-gwmc-6795-qghj, GO-2022-0600 | Medium | 0.9% | 15 Feb, 2022 | Go github.com/hashicorp/nomad |
Symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations in dbdeployer CVE-2020-26277, GHSA-47wr-426j-fr82, GO-2022-0787 | Medium | 1.2% | 12 Feb, 2022 | Go github.com/datacharmer/dbdeployer |
"catalog's registry v2 api exposed on unauthenticated path in Harbor" BIT-harbor-2020-29662, CVE-2020-29662, GHSA-38r5-34mr-mvm7, GO-2022-0785 | Medium | 0.7% | 12 Feb, 2022 | Go github.com/goharbor/harbor |
Improper Validation of Certificate with Host Mismatch in mellium.im/xmpp/websocket CVE-2022-24968, GHSA-h289-x5wc-xcv8, GHSA-m658-p24x-p74r, GO-2022-0370 | Medium | 0.5% | 12 Feb, 2022 | Go mellium.im/xmpp |
SAML authentication vulnerability due to stdlib XML parsing CVE-2020-26276, GHSA-w3wf-cfx3-6gcx | High | 2.2% | 11 Feb, 2022 | Go github.com/fleetdm/fleet/v4 |
GitHub CLI can execute a git binary from the current directory GHSA-fqfh-778m-2v32, GO-2022-0395 | Medium | Not scored | 11 Feb, 2022 | Go github.com/cli/cli |