Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-869c-j7wc-8jqv
  • Go/github.com/gin-contrib/cors
  • Go/github.com/gin-gonic/gin
 Gin mishandles a wildcard at the end of an origin string 29 Jun 2024
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-2c4m-59x9-fr2g
  • Go/github.com/gin-gonic/gin
 Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function 12 May 2023
  • Fix available
  • Severity - 4.3 (Medium)
GO-2023-1737
  • Go/github.com/gin-gonic/gin
 Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin 11 May 2023
  • Fix available
GHSA-3vp4-m3rf-835h
  • Go/github.com/gin-gonic/gin
 Improper input validation in github.com/gin-gonic/gin 04 May 2023
  • Fix available
  • Severity - 5.6 (Medium)
GHSA-6vm3-jj99-7229
  • Go/github.com/gin-gonic/gin
 Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines 27 Dec 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-h395-qcrw-5vmq
  • Go/github.com/gin-gonic/gin
 Inconsistent Interpretation of HTTP Requests in github.com/gin-gonic/gin 23 Jun 2021
  • Fix available
  • Severity - 7.1 (High)
GO-2020-0001
  • Go/github.com/gin-gonic/gin
 Arbitrary log line injection in github.com/gin-gonic/gin 14 Apr 2021
  • Fix available
GO-2021-0052
  • Go/github.com/gin-gonic/gin
 Inconsistent interpretation of HTTP Requests in github.com/gin-gonic/gin 14 Apr 2021
  • Fix available