| Snyk

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Arbitrary Code Execution	github.com/cli/cli/pkg/iostreams<1.2.1	Go	4 Sept 2024
H Arbitrary Code Execution	github.com/cli/cli/pkg/cmd/repo/fork<1.2.1	Go	4 Sept 2024
H Arbitrary Code Execution	github.com/cli/cli/pkg/cmd/repo/create<1.2.1	Go	4 Sept 2024
H Arbitrary Code Execution	github.com/cli/cli/pkg/cmd/release/create<1.2.1	Go	4 Sept 2024
H Arbitrary Code Execution	github.com/cli/cli/pkg/cmd/pr/checkout<1.2.1	Go	4 Sept 2024
H Arbitrary Code Execution	github.com/cli/cli/pkg/cmd/alias/expand<1.2.1	Go	4 Sept 2024
H Arbitrary Code Execution	github.com/cli/cli/pkg/browser<1.2.1	Go	4 Sept 2024
M Buffer Overflow	github.com/pingcap/tidb/pkg/planner/core<8.2.0	Go	4 Sept 2024
M Buffer Overflow	github.com/pingcap/tidb/pkg/parser/types<8.2.0	Go	4 Sept 2024
M Buffer Overflow	github.com/pingcap/tidb/pkg/expression<8.2.0	Go	4 Sept 2024
M Information Exposure	github.com/metal3-io/baremetal-operator/controllers/metal3.io<0.6.2	Go	3 Sept 2024
H Information Exposure	github.com/spectolabs/hoverfly/core<1.10.3	Go	3 Sept 2024
L Regular Expression Denial of Service (ReDoS)	github.com/sse-secure-systems/connaisseur/res<3.3.1	Go	3 Sept 2024
M Race Condition Enabling Link Following	github.com/opencontainers/runc/libcontainer/system<1.1.14>=1.2.0-rc.1 <1.2.0-rc.3	Go	3 Sept 2024
M Race Condition Enabling Link Following	github.com/opencontainers/runc/libcontainer/utils<1.1.14>=1.2.0-rc.1 <1.2.0-rc.3	Go	3 Sept 2024
M Race Condition Enabling Link Following	github.com/opencontainers/runc/libcontainer<1.1.14>=1.2.0-rc.1 <1.2.0-rc.3	Go	3 Sept 2024
M Information Exposure Through Log Files	github.com/hashicorp/vault/audit>=1.16.7 <1.17.5	Go	2 Sept 2024
M Missing Authorization	goauthentik.io<2024.4.4>=2024.6.0-rc1 <2024.6.4	Go	1 Sept 2024
M Missing Authorization	github.com/goauthentik/authentik<2024.4.4>=2024.6.0-rc1 <2024.6.4	Go	1 Sept 2024
M Incorrect Permission Assignment for Critical Resource	github.com/open-policy-agent/opa/loader<0.68.0	Go	1 Sept 2024
M Cross-site Scripting (XSS)	github.com/casdoor/casdoor*	Go	1 Sept 2024
M Race Condition	github.com/wandb/wandb/core/pkg/server<0.15.10	Go	1 Sept 2024
M Information Exposure	github.com/open-telemetry/opentelemetry-collector-contrib/receiver/awsfirehosereceiver>=0.49.0 <0.108.0	Go	29 Aug 2024
M Arbitrary File Write via Archive Extraction (Zip Slip)	github.com/ollama/ollama/cmd<0.1.47	Go	29 Aug 2024
M Arbitrary File Write via Archive Extraction (Zip Slip)	github.com/ollama/ollama/server<0.1.47	Go	29 Aug 2024
H Missing Authentication for Critical Function	github.com/jpillora/chisel<1.10.0	Go	27 Aug 2024
H Insufficient Verification of Data Authenticity	github.com/cosmos/interchain-security/v5/x/ccv/provider/keeper>=2.4.0-lsm <4.0.0	Go	26 Aug 2024
C Improper Input Validation	github.com/imroc/req/v3>=3.7.0 <3.43.4	Go	26 Aug 2024
M Use of Hard-coded Credentials	github.com/go-tribe/gotribe/pkg/token*	Go	25 Aug 2024
H Improper Access Control	github.com/clastix/kamaji/internal/datastore<edge-24.8.2	Go	25 Aug 2024

APPLICATION

OPERATING SYSTEM