VulertSecurity VulertSecurity

Vulnerability Database · Search

Go vulnerabilities — 9,852 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Unrated CVE-2019-19619: Cross-site Scripting in Documize github.com/documize/community Go 14 Apr 2021 1.76.3-0.20191119114751-a4384210d4d0
Unrated CVE-2021-21237: Git LFS Windows Arbitrary Code Execution github.com/git-lfs/git-lfs Go 14 Apr 2021 1.5.1-0.20210113180018-fc664697ed2c
Unrated CVE-2018-6558: Privilege Escalation in fscrypt github.com/google/fscrypt Go 14 Apr 2021 0.2.4
Unrated CVE-2020-26264: Denial of Service in github.com/ethereum/go-ethereum github.com/ethereum/go-ethereum Go 14 Apr 2021 1.9.25
Unrated CVE-2020-29509: Authentication Bypass in github.com/russellhaering/gosaml2 github.com/russellhaering/gosaml2 Go 14 Apr 2021 0.6.0
Unrated CVE-2020-9283: golang.org/x/crypto Improper Verification of Cryptographic Signature golang.org/x/crypto Go 14 Apr 2021 0.0.0-20200220183623-bac4c82f6975
Unrated CVE-2017-18367: Improper input validation in github.com/seccomp/libseccomp-golang github.com/seccomp/libseccomp-golang Go 14 Apr 2021 0.9.1-0.20170424173420-06e7a29f36a3
Unrated CVE-2020-10675: Infinite Loop in jsonparser github.com/buger/jsonparser Go 14 Apr 2021 1.0.0
Unrated CVE-2021-3121: Improper Input Validation in GoGo Protobuf github.com/gogo/protobuf Go 14 Apr 2021 1.3.2
Unrated CVE-2019-20786: Improper Authentication in Pion DTLS github.com/pion/dtls Go 14 Apr 2021 1.5.2
Unrated CVE-2019-11254: Excessive Platform Resource Consumption within a Loop in Kubernetes gopkg.in/yaml.v2 Go 14 Apr 2021 2.2.8
Unrated CVE-2020-36567: Arbitrary log line injection in github.com/gin-gonic/gin github.com/gin-gonic/gin Go 14 Apr 2021 1.6.0
Unrated CVE-2017-15133: Denial of service in github.com/miekg/dns github.com/miekg/dns Go 14 Apr 2021 1.0.4-0.20180125103619-43913f2f4fbd
Unrated CVE-2020-8945: Vulnerability in github.com/proglottis/gpgme github.com/proglottis/gpgme Go 14 Apr 2021 0.1.1
Unrated CVE-2020-35381: Denial of Service in jsonparser github.com/buger/jsonparser Go 14 Apr 2021 1.1.1
Unrated CVE-2018-17846: Infinite loop in golang.org/x/net/html golang.org/x/net Go 14 Apr 2021 0.0.0-20190125091013-d26f9f9a57f3
Unrated CVE-2020-36569: Authentication bypass in github.com/nanobox-io/golang-nanoauth github.com/nanobox-io/golang-nanoauth Go 14 Apr 2021 0.0.0-20200131131040-063a3fb69896
Unrated CVE-2020-36568: Resource exhaustion in github.com/revel/revel github.com/revel/revel Go 14 Apr 2021 1.0.0
Unrated CVE-2018-18206: Denial of Service in Bytom github.com/bytom/bytom Go 14 Apr 2021 1.0.4-0.20180831054840-1ac3c8ac4f2b
Unrated CVE-2021-31153: File Exposure in pleaser toolchain Go 14 Apr 2021 1.14.14

Showing the first 200 matches. Add filters to narrow the results.

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.