cg | Snyk

Direct Vulnerabilities

Known vulnerabilities in the cg package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-97032	<0.2.378-r1
L CVE-2026-78669	<0.2.378-r1
L CVE-2026-78660	<0.2.378-r1
L CVE-2026-78663	<0.2.379-r0
L CVE-2026-78659	<0.2.378-r1
L Resource Exhaustion	<0.2.364-r1
L GHSA-pg57-6jwg-q645	<0.2.364-r1
L Resource Exhaustion	<0.2.350-r0
L GHSA-7jxh-36q5-gcqv	<0.2.350-r0
L GHSA-2v4p-qf9q-27wj	<0.2.348-r0
L Improper Validation of Array Index	<0.2.348-r0
L CVE-2026-56855	<0.2.346-r1
L CVE-2026-78662	<0.2.346-r1
L GHSA-vp52-pcj8-j9qc	<0.2.345-r0
L Resource Exhaustion	<0.2.345-r0
L GHSA-gjhq-gjfw-99mq	<0.2.341-r0
L CVE-2026-56854	<0.2.341-r0
L GHSA-hrxh-6v49-42gf	<0.2.321-r0
L Resource Exhaustion	<0.2.300-r0
L GHSA-7rp8-r62p-q6wc	<0.2.300-r0
L Symlink Following	<0.2.295-r2
L GHSA-33vj-92qq-66hc	<0.2.295-r2
L CVE-2026-47262	<0.2.295-r2
L GHSA-jpcc-p29g-p8mq	<0.2.295-r2
L CVE-2026-50195	<0.2.295-r2
L GHSA-xhf5-7wjv-pqxp	<0.2.295-r2
L Improper Input Validation	<0.2.295-r2
L GHSA-rgh6-rfwx-v388	<0.2.295-r2
L Improper Input Validation	<0.2.295-r2
L GHSA-cvxm-645q-p574	<0.2.295-r2
L GHSA-w879-237q-wc7r	<0.2.266-r1
L GHSA-q4h4-gmj2-qvw2	<0.2.266-r1
L GHSA-89gr-r52h-f8rx	<0.2.266-r1
L GHSA-rm3j-f69w-wqmq	<0.2.266-r1
L GHSA-f5wc-c3c7-36mc	<0.2.266-r1
L GHSA-vgwf-h737-ff37	<0.2.266-r1
L GHSA-qpw4-5x99-6vjp	<0.2.266-r1
L GHSA-78mq-xcr3-xm33	<0.2.266-r1
L GHSA-5wrp-cwcj-q835	<0.2.292-r0
L Uncontrolled Memory Allocation	<0.2.292-r0
L CVE-2026-39821	<0.2.273-r1
L GHSA-w2q5-6q6x-x959	<0.2.273-r1
L Improper Verification of Cryptographic Signature	<0.2.266-r1
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<0.2.266-r1
L Improper Certificate Validation	<0.2.266-r1
L Deserialization of Untrusted Data	<0.2.266-r1
L Integer Overflow or Wraparound	<0.2.266-r1
L Missing Authorization	<0.2.266-r1
L Out-of-Bounds	<0.2.266-r1
L Incorrect Type Conversion or Cast	<0.2.266-r1
L Improper Privilege Management	<0.2.264-r1
L GHSA-fqw6-gf59-qr4w	<0.2.264-r1
L GHSA-crhj-59gh-8x96	<0.2.263-r1
L Directory Traversal	<0.2.263-r1
C Improper Encoding or Escaping of Output	<0.2.263-r1
L GHSA-m7cr-m3pv-hgrp	<0.2.263-r1
L Improper Validation of Array Index	<0.2.261-r0
L GHSA-7rmh-48mx-2vwc	<0.2.261-r0
L GHSA-pmwq-pjrm-6p5r	<0.2.261-r0
L GHSA-7c37-gx6w-8vc5	<0.2.261-r0
L Improper Certificate Validation	<0.2.261-r0
L Uncontrolled Recursion	<0.2.260-r1
L GHSA-m3xc-h892-ggx6	<0.2.260-r1
H Incorrect Behavior Order: Validate Before Canonicalize	<0.2.260-r1
L GHSA-389r-gv7p-r3rp	<0.2.260-r1
H Insufficiently Protected Credentials	<0.2.245-r0
L GHSA-92mm-2pjq-r785	<0.2.246-r1
L CVE-2026-4660	<0.2.246-r1
L Improper Certificate Validation	<0.2.245-r0
L GHSA-w8rr-5gcm-pp58	<0.2.245-r0
L GHSA-xm5m-wgh2-rrg3	<0.2.245-r0
L GHSA-hfvc-g4fc-pqhx	<0.2.245-r0
L Uncontrolled Memory Allocation	<0.2.245-r0
H Untrusted Search Path	<0.2.245-r0
L GHSA-3xc5-wrhm-f963	<0.2.245-r0
H Authentication Bypass	<0.2.235-r0
H Off-by-one Error	<0.2.235-r0
L GHSA-xmrv-pmrh-hhx2	<0.2.235-r0
L Uncaught Exception	<0.2.235-r0
L GHSA-78h2-9frx-2jm8	<0.2.235-r0
L GHSA-pxq6-2prw-chj9	<0.2.235-r0
L GHSA-x744-4wpc-v9h2	<0.2.235-r0
L Integer Underflow	<0.2.232-r0
L GHSA-gm2x-2g9h-ccm8	<0.2.232-r0
L GHSA-jhf3-xxhw-2wpp	<0.2.232-r0
L Improper Validation of Array Index	<0.2.232-r0
L Improper Validation of Array Index	<0.2.225-r0
L GHSA-6g7g-w4f8-9c9x	<0.2.225-r0
L Improper Cleanup on Thrown Exception	<0.2.225-r0
L GHSA-rjcw-vg7j-m9rc	<0.2.225-r0
L Improper Authorization	<0.2.222-r0
L GHSA-p77j-4mvh-x3m3	<0.2.222-r0
L GHSA-8fj7-8h3w-xwfm	<0.2.219-r0
L CVE-2026-27141	<0.2.219-r0
C CVE-2026-1229	<0.2.212-r0
L GHSA-q9hv-hpm4-hj6x	<0.2.212-r0
L GHSA-fw7p-63qq-7hpr	<0.2.209-r0
L Improper Initialization	<0.2.209-r0
L GHSA-37cx-329c-33x3	<0.2.203-r0
M Improper Validation of Integrity Check Value	<0.2.203-r0
L GHSA-jqc5-w2xx-5vq4	<0.2.202-r0
M Directory Traversal	<0.2.202-r0
L GHSA-qxx2-7h4c-83f4	<0.2.201-r0
H OS Command Injection	<0.2.201-r0
L GHSA-vqqr-rmpc-hhg2	<0.2.201-r0
L GHSA-2w4f-9fgg-q2v9	<0.2.201-r0
L GHSA-5g94-c2wx-8pxw	<0.2.201-r0
L GHSA-rf4g-89h5-crcr	<0.2.201-r0
H Reachable Assertion	<0.2.201-r0
H Improper Verification of Cryptographic Signature	<0.2.201-r0
L GHSA-6p9p-q6wh-9j89	<0.2.201-r0
H OS Command Injection	<0.2.201-r0
L Resource Exhaustion	<0.2.201-r0
L GHSA-fphv-w9fq-2525	<0.2.201-r0
L Directory Traversal	<0.2.201-r0
L GHSA-846p-jg2w-w324	<0.2.201-r0
H Directory Traversal	<0.2.201-r0
M Directory Traversal	<0.2.201-r0
L GHSA-4c4x-jm2x-pf9j	<0.2.200-r0
L GHSA-273p-m2cw-6833	<0.2.200-r0
L GHSA-fcv2-xgw5-pqxf	<0.2.200-r0
L Server-Side Request Forgery (SSRF)	<0.2.200-r0
L NULL Pointer Dereference	<0.2.200-r0
L Directory Traversal	<0.2.200-r0
L GHSA-4qg8-fj49-pxjh	<0.2.193-r1
L Asymmetric Resource Consumption (Amplification)	<0.2.193-r1
L Asymmetric Resource Consumption (Amplification)	<0.2.193-r1
L GHSA-f83f-xpx7-ffpw	<0.2.193-r1
L Improper Cross-boundary Removal of Sensitive Data	<0.2.180-r0
L GHSA-6gxw-85q2-q646	<0.2.180-r0
L CVE-2025-47914	<0.2.177-r1
L GHSA-j5w8-q4qc-rx2x	<0.2.177-r1
L CVE-2025-58181	<0.2.177-r1
L GHSA-f6x5-jh6r-wrfv	<0.2.177-r1
M Memory Leak	<0.2.174-r0
H Symlink Following	<0.2.174-r0
H Incorrect Execution-Assigned Permissions	<0.2.174-r0
M CVE-2025-11579	<0_git20251010-r1
L CVE-2025-47910	<0_git20250819-r2
L Allocation of Resources Without Limits or Throttling	<0_git20250819-r1
L Incorrect Default Permissions	<0_git20250730-r0
L Incorrect Default Permissions	<0_git20250730-r0
M Missing Initialization of Resource	<0_git20250730-r0
H Incorrect Privilege Assignment	<0_git20250613-r0

Vulnerability

Vulnerable Version

CVE-2026-97032

<0.2.378-r1