| github.com/go-git/go-git/v5 |
CVE-2025-21613 |
严重 |
v5.11.0 |
5.13.0 |
go-git: argument injection via the URL field
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21613
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2025-01-06 17:15 修改: 2025-01-06 17:15
|
| stdlib |
CVE-2024-24790 |
严重 |
1.20.12 |
1.21.11, 1.22.4 |
golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
|
| github.com/cloudflare/circl |
GHSA-9763-4f94-gfch |
高危 |
v1.3.3 |
1.3.7 |
CIRCL's Kyber: timing side-channel (kyberslash2)
漏洞详情: https://github.com/advisories/GHSA-9763-4f94-gfch
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| github.com/beego/beego |
CVE-2021-27116 |
高危 |
v1.12.12 |
2.0.2 |
Privilege escalation in beego
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27116
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2022-04-05 16:15 修改: 2022-04-12 20:17
|
| github.com/go-git/go-git/v5 |
CVE-2025-21614 |
高危 |
v5.11.0 |
5.13.0 |
go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21614
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2025-01-06 17:15 修改: 2025-01-06 17:15
|
| golang.org/x/image |
CVE-2024-24792 |
高危 |
v0.0.0-20220302094943-723b81ca9867 |
0.18.0 |
Parsing a corrupt or malicious image with invalid color indices can ca ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
|
| github.com/beego/beego |
CVE-2021-27117 |
高危 |
v1.12.12 |
2.0.2 |
Privilege escalation in beego
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27117
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2022-04-05 16:15 修改: 2022-04-12 20:17
|
| stdlib |
CVE-2023-45288 |
高危 |
1.20.12 |
1.21.9, 1.22.2 |
golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
|
| stdlib |
CVE-2024-34156 |
高危 |
1.20.12 |
1.22.7, 1.23.1 |
encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
|
| golang.org/x/image |
CVE-2023-29408 |
中危 |
v0.0.0-20220302094943-723b81ca9867 |
0.10.0 |
golang.org/x/image/tiff: TIFF decoder does not place a limit on the size of compressed tile data
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29408
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2023-08-02 20:15 修改: 2023-11-07 04:11
|
| google.golang.org/protobuf |
CVE-2024-24786 |
中危 |
v1.32.0 |
1.33.0 |
golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-03-05 23:15 修改: 2024-11-07 17:35
|
| gopkg.in/square/go-jose.v2 |
CVE-2024-28180 |
中危 |
v2.6.0 |
|
jose-go: improper handling of highly compressed data
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28180
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-03-09 01:15 修改: 2024-06-12 02:15
|
| github.com/beego/beego |
CVE-2024-55885 |
中危 |
v1.12.12 |
|
Beego has Collision Hazards of MD5 in Cache Key Filenames
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-55885
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-12-12 20:15 修改: 2024-12-12 20:15
|
| golang.org/x/image |
CVE-2022-41727 |
中危 |
v0.0.0-20220302094943-723b81ca9867 |
0.5.0 |
golang.org/x/image: Uncontrolled Resource Consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41727
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2023-02-28 18:15 修改: 2023-11-07 03:52
|
| golang.org/x/image |
CVE-2023-29407 |
中危 |
v0.0.0-20220302094943-723b81ca9867 |
0.10.0 |
golang.org/x/image/tiff: excessive CPU consumption in decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29407
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2023-08-02 20:15 修改: 2023-11-07 04:11
|
| stdlib |
CVE-2023-45289 |
中危 |
1.20.12 |
1.21.8, 1.22.1 |
golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
|
| stdlib |
CVE-2023-45290 |
中危 |
1.20.12 |
1.21.8, 1.22.1 |
golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
|
| stdlib |
CVE-2024-24783 |
中危 |
1.20.12 |
1.21.8, 1.22.1 |
golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
|
| stdlib |
CVE-2024-24784 |
中危 |
1.20.12 |
1.21.8, 1.22.1 |
golang: net/mail: comments in display names are incorrectly handled
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
|
| stdlib |
CVE-2024-24785 |
中危 |
1.20.12 |
1.21.8, 1.22.1 |
golang: html/template: errors returned from MarshalJSON methods may break template escaping
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
|
| stdlib |
CVE-2024-24789 |
中危 |
1.20.12 |
1.21.11, 1.22.4 |
golang: archive/zip: Incorrect handling of certain ZIP files
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
|
| stdlib |
CVE-2024-24791 |
中危 |
1.20.12 |
1.21.12, 1.22.5 |
net/http: Denial of service due to improper 100-continue handling in net/http
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
|
| stdlib |
CVE-2024-34155 |
中危 |
1.20.12 |
1.22.7, 1.23.1 |
go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
|
| stdlib |
CVE-2024-34158 |
中危 |
1.20.12 |
1.22.7, 1.23.1 |
go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
|
| github.com/golang-jwt/jwt/v4 |
CVE-2024-51744 |
低危 |
v4.5.0 |
4.5.1 |
golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744
镜像层: sha256:e6ecc4f942939c33c437cb00e378ec5862cf80e388fcaefb90c84b35a2e01af2
发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04
|