golang-github-burntsushi-toml

Direct Vulnerabilities

Known vulnerabilities in the golang-github-burntsushi-toml package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Link Following	<0:1.5.0-1.amzn2023.0.3
M Information Exposure	<0:1.5.0-1.amzn2023.0.3
M Excessive Platform Resource Consumption within a Loop	<0:1.5.0-1.amzn2023.0.2
M Improper Output Neutralization for Logs	<0:1.5.0-1.amzn2023.0.2
M Unchecked Input for Loop Condition	<0:1.5.0-1.amzn2023.0.2
H Unchecked Input for Loop Condition	<0:1.5.0-1.amzn2023.0.1
H Time-of-check Time-of-use (TOCTOU)	<0:1.5.0-1.amzn2023.0.1
H Directory Traversal	<0:1.5.0-1.amzn2023.0.1
H CVE-2026-33811	<0:1.5.0-1.amzn2023.0.1
H Creation of Immutable Text Using String Concatenation	<0:1.5.0-1.amzn2023.0.1
H Cross-site Scripting (XSS)	<0:1.5.0-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<0:1.5.0-1.amzn2023.0.1
H Unchecked Input for Loop Condition	<0:1.5.0-1.amzn2023.0.1
H Improper Validation of Unsafe Equivalence in Input	<0:1.5.0-1.amzn2023.0.1
H Excessive Platform Resource Consumption within a Loop	<0:1.5.0-1.amzn2023.0.1
H External Control of Assumed-Immutable Web Parameter	<0:1.5.0-1.amzn2023.0.1
H Cross-site Scripting (XSS)	<0:1.5.0-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<0:1.5.0-1.amzn2023.0.1
H Cross-site Scripting (XSS)	<0:1.5.0-1.amzn2023.0.1
H Missing Required Cryptographic Step	<0:1.5.0-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<0:1.5.0-1.amzn2023.0.1