漏洞公告

Insecure deserialization in Wire

Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint

Path Traversal in Docker

miekg/dns insecurely generates random numbers

Insufficient Session Expiration in Kiali

gopkg.in/macaron.v1 Open Redirect vulnerability

Path traversal in u-root

Authorization bypass in github.com/dgrijalva/jwt-go

Integer overflow in github.com/gorilla/websocket

github.com/tidwall/gjson is vulnerable to Denial of service

Podman Origin Validation Error

github.com/pires/go-proxyproto denial of service vulnerability

Cross-site scripting in bluemonday

Insecure Permissions in Gogs

github.com/unknwon/cae Path Traversal vulnerability

Path Traversal in github.com/unknwon/cae/zip

Go JOSE Signature Validation Bypass

Go Ethereum Improper Input Validation

XStream is vulnerable to a Remote Command Execution attack

XWiki users registered with email verification can self re-activate their disabled accounts

Script injection without script or programming rights through Gadget titles

Information Exposure in jaeger

golang.org/x/text Infinite loop