golang-shared vulnerabilities

Known vulnerabilities in the golang-shared package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Arbitrary Code Injection	<0:1.20.8-1.47.amzn1
M CVE-2023-45284	<0:1.20.12-1.49.amzn1
H Arbitrary Code Injection	<0:1.20.8-1.47.amzn1
H Cross-site Scripting (XSS)	<0:1.20.8-1.47.amzn1
H Incorrect Calculation	<0:1.20.8-1.47.amzn1
H Allocation of Resources Without Limits or Throttling	<0:1.20.8-1.47.amzn1
H Arbitrary Code Injection	<0:1.20.8-1.47.amzn1
H Directory Traversal	<0:1.20.8-1.47.amzn1
M Directory Traversal	<0:1.20.12-1.49.amzn1
H Improper Handling of Unicode Encoding	<0:1.20.8-1.47.amzn1
M Resource Exhaustion	<0:1.20.12-1.49.amzn1
H Resource Exhaustion	<0:1.20.8-1.47.amzn1
H Improper Handling of Unicode Encoding	<0:1.20.8-1.47.amzn1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.20.8-1.47.amzn1
H Resource Exhaustion	<0:1.20.8-1.47.amzn1
H Improper Input Validation	<0:1.16.15-1.37.amzn1
H Resource Exhaustion	<0:1.18.6-1.42.amzn1
H Improper Input Validation	<0:1.18.6-1.42.amzn1
H Resource Exhaustion	<0:1.18.6-1.42.amzn1
H Incorrect Authorization	<0:1.18.6-1.42.amzn1
H Unchecked Return Value	<0:1.18.6-1.42.amzn1
H Improper Input Validation	<0:1.18.6-1.42.amzn1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.18.6-1.42.amzn1
H Integer Overflow or Wraparound	<0:1.18.6-1.42.amzn1
H Resource Exhaustion	<0:1.18.6-1.42.amzn1
H Resource Exhaustion	<0:1.20.10-1.48.amzn1
H Resource Exhaustion	<0:1.20.10-1.48.amzn1
H Arbitrary Code Injection	<0:1.20.10-1.48.amzn1
H Resource Exhaustion	<0:1.20.8-1.47.amzn1
H HTTP Response Splitting	<0:1.20.8-1.47.amzn1
H Exposure of Resource to Wrong Sphere	<0:1.20.8-1.47.amzn1
H Arbitrary Code Injection	<0:1.18.6-1.45.amzn1
H Improper Handling of Unicode Encoding	<0:1.18.6-1.44.amzn1
H Improper Handling of Unicode Encoding	<0:1.18.6-1.44.amzn1
H Improper Handling of Unicode Encoding	<0:1.18.6-1.44.amzn1
H Resource Exhaustion	<0:1.18.6-1.43.amzn1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.18.6-1.43.amzn1
H Resource Exhaustion	<0:1.18.6-1.43.amzn1
H Resource Exhaustion	<0:1.18.6-1.43.amzn1
H Arbitrary Code Injection	<0:1.18.6-1.43.amzn1
H Resource Exhaustion	<0:1.18.6-1.43.amzn1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.18.6-1.43.amzn1
H Directory Traversal	<0:1.18.6-1.43.amzn1
H Resource Exhaustion	<0:1.18.6-1.43.amzn1
H Resource Exhaustion	<0:1.18.6-1.43.amzn1
H Incorrect Calculation	<0:1.18.6-1.43.amzn1
H Allocation of Resources Without Limits or Throttling	<0:1.18.6-1.43.amzn1
H Arbitrary Code Injection	<0:1.18.6-1.43.amzn1
M Integer Overflow or Wraparound	<0:1.16.15-1.38.amzn1
M Unchecked Return Value	<0:1.16.15-1.38.amzn1
M Incorrect Authorization	<0:1.16.15-1.38.amzn1
H Resource Exhaustion	<0:1.18.6-1.42.amzn1
H Improperly Controlled Sequential Memory Allocation	<0:1.18.6-1.42.amzn1
H Use of a Broken or Risky Cryptographic Algorithm	<0:1.18.6-1.42.amzn1
H Improperly Controlled Sequential Memory Allocation	<0:1.18.6-1.42.amzn1
H Information Exposure	<0:1.18.6-1.42.amzn1
H Improperly Controlled Sequential Memory Allocation	<0:1.18.6-1.42.amzn1
H Improperly Controlled Sequential Memory Allocation	<0:1.18.6-1.42.amzn1
H Insufficient Entropy	<0:1.18.6-1.42.amzn1
H Improperly Controlled Sequential Memory Allocation	<0:1.18.6-1.42.amzn1
H Integer Overflow or Wraparound	<0:1.18.6-1.42.amzn1
H Improperly Controlled Sequential Memory Allocation	<0:1.18.6-1.42.amzn1
H Improper Privilege Management	<0:1.18.6-1.42.amzn1
H Authorization Bypass Through User-Controlled Key	<0:1.18.6-1.42.amzn1
H HTTP Request Smuggling	<0:1.18.6-1.42.amzn1
H Buffer Overflow	<0:1.18.6-1.42.amzn1
H Improperly Controlled Sequential Memory Allocation	<0:1.18.6-1.42.amzn1
H Improper Input Validation	<0:1.16.15-1.37.amzn1
H Resource Exhaustion	<0:1.16.15-1.37.amzn1
H Out-of-Bounds	<0:1.16.15-1.37.amzn1
H Information Exposure	<0:1.16.15-1.37.amzn1
H Improper Input Validation	<0:1.16.15-1.37.amzn1

Vulnerability

Vulnerable Version

Arbitrary Code Injection

<0:1.20.8-1.47.amzn1

CVE-2023-45284

<0:1.20.12-1.49.amzn1

Arbitrary Code Injection

<0:1.20.8-1.47.amzn1

Cross-site Scripting (XSS)

<0:1.20.8-1.47.amzn1

Incorrect Calculation

<0:1.20.8-1.47.amzn1