Go - OSV

GHSA-48v2-6jcm-fc99

Go/github.com/mtzanidakis/praktor

praktor: Path traversal in Telegram file uploads allows writing outside the... 20 hours ago

Fix available
Severity - 8.2 (High)

GHSA-9ppr-wfw9-xvr2

Go/github.com/tinfoil-factory/netfoil

Netfoil doesn't decrement TTL 20 hours ago

Fix available

GHSA-m3qr-fvp4-78xj

Go/github.com/basekick-labs/arc

Arc has unauthenticated application log disclosure via `/api/v1/logs` 21 hours ago

Fix available

GHSA-8fmv-6rg5-5924

Go/github.com/kubeflow/pipelines

Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to... 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-wg5q-x4j9-qm54

Go/github.com/kubeflow/pipelines

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-g5jq-qmqr-qrwf

Go/github.com/gofiber/fiber/v2

Fiber: CORS wildcard origins matched without a dot boundary, allowing... 4 days ago

Fix available
Severity - 5.9 (Medium)

GHSA-hff9-5pqw-6w9f

Go/github.com/imgproxy/imgproxy
Go/github.com/imgproxy/imgproxy/v2
Go/github.com/imgproxy/imgproxy/v3

imgproxy has integer overflow in imgproxy ICO loader that causes denial of... 4 days ago

Fix available
Severity - 9.8 (Critical)

GHSA-494m-4556-wf5p

Go/github.com/imgproxy/imgproxy/v3

imgproxy has out-of-bounds heap read/write in ICO loader BMP header... 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-mmq5-xm89-9pfg

Go/github.com/imgproxy/imgproxy/v3

imgproxy has unbounded memory allocation in ICO loader that allows... 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-2wrx-84qj-4pcg

Go/github.com/anacrolix/torrent

anacrolix torrent has unbounded recursion in the bencode decoder that causes... 4 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-f3fj-9625-rv3m

Go/github.com/charmbracelet/soft-serve

charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository... 4 days ago

Fix available
Severity - 5.9 (Medium)

GHSA-fgxm-5hvv-x4vh

Go/github.com/charmbracelet/soft-serve

charmbracelet/soft-serve HTTP responses disclose the existence and names of... 4 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-8rvj-mm4h-c258

Go/github.com/cert-manager/cert-manager

cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver... 5 days ago

Fix available
Severity - 7.3 (High)

GHSA-rhj7-vh3v-mcq6

Go/github.com/daptin/daptin

Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU... 5 days ago

No fix available
Severity - 8.7 (High)

GHSA-2hw4-c9m4-f2fj

Go/knative.dev/pkg

knative.dev/pkg admission webhooks allow unbounded request-body memory... 6 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-vvm8-gf78-28g4

Go/github.com/go-jose/go-jose/v3
Go/github.com/go-jose/go-jose/v4

Go JOSE: Panics in JSON parsing 6 days ago

Fix available
Severity - 6.9 (Medium)

Vulnerabilities