Search CVE reports
41 – 50 of 1653 results
GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role...
1 affected package
gitlab
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gitlab | Not in release | Not in release | Not in release | — | — |
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to create...
1 affected package
gitlab
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gitlab | Not in release | Not in release | Not in release | — | — |
Rejected reason: Further research determined the issue is not a vulnerability based on CNA Rule 4.1.12 The act of updating Product dependencies MUST NOT be determined to be a Vulnerability, regardless of whether the dependencies...
2 affected packages
golang-github-nats-io-nkeys, nats-server
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-github-nats-io-nkeys | Not affected | Not affected | Not affected | Not affected | — |
| nats-server | Not affected | Not affected | Not in release | — | — |
Not in release
Fiber is an Express inspired web framework written in Go. Prior to 3.4.0, the helmet middleware in middleware/helmet/helmet.go never sets the Strict-Transport-Security response header even when HSTSMaxAge is configured because it...
2 affected packages
golang-github-gofiber-fiber, golang-github-gofiber-fiber-v2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-github-gofiber-fiber | Not in release | Not in release | Not in release | — | — |
| golang-github-gofiber-fiber-v2 | Not in release | Not in release | Not in release | — | — |
Not in release
Fiber is an Express inspired web framework written in Go. Prior to 3.3.0 and 2.52.14, the BalancerForward proxy helper in middleware/proxy/proxy.go uses Header.Add() instead of Header.Set() when injecting X-Real-IP, allowing an...
2 affected packages
golang-github-gofiber-fiber, golang-github-gofiber-fiber-v2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-github-gofiber-fiber | Not in release | Not in release | Not in release | — | — |
| golang-github-gofiber-fiber-v2 | Not in release | Not in release | Not in release | — | — |
Not in release
Fiber is an Express inspired web framework written in Go. Prior to 3.3.0, the default Authorizer function in the BasicAuth middleware in middleware/basicauth/config.go uses short-circuit evaluation that skips password hash...
1 affected package
golang-github-gofiber-fiber
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-github-gofiber-fiber | Not in release | Not in release | Not in release | — | — |
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been...
2 affected packages
golang-github-pion-dtls-v3, golang-github-pion-dtls.v2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-github-pion-dtls-v3 | Needs evaluation | Not in release | Not in release | — | — |
| golang-github-pion-dtls.v2 | Needs evaluation | Needs evaluation | Not in release | — | — |
Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path (preserving %2F as-is), while StaticDirectoryHandler...
3 affected packages
golang-github-labstack-echo, golang-github-labstack-echo.v2, golang-github-labstack-echo.v3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-github-labstack-echo | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| golang-github-labstack-echo.v2 | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
| golang-github-labstack-echo.v3 | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-attestation. parseEfiSignatureList() does not advance the buffer past vendor bytes before reading entries. For hashSHA256SigGUID...
1 affected package
golang-github-google-go-attestation
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-github-google-go-attestation | Needs evaluation | Not in release | Not in release | — | — |
[Unknown description]
1 affected package
golang-github-containers-buildah
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| golang-github-containers-buildah | Needs evaluation | Needs evaluation | Needs evaluation | — | — |