Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Improper Access Control	github.com/goauthentik/authentik/authentik/providers/oauth2/views >=2024.4.0-rc1 <2024.4.3 >=2024.2.0-rc1 <2024.2.4 >=2024.6.0-rc1 <2024.6.0	Go	30 Jun 2024
M Externally Controlled Reference to a Resource in Another Sphere	github.com/cometbft/cometbft/blocksync <0.37.7 >=0.38.0 <0.38.8	Go	30 Jun 2024
L Improper Access Control	github.com/hashicorp/vault/vault <1.4.7 >=1.5.0 <1.5.4	Go	30 Jun 2024
M Incorrect Privilege Assignment	github.com/golang/sys/unix <0.1.0	Go	28 Jun 2024
C Command Injection	github.com/go-skynet/localai/pkg/model <2.16.0	Go	27 Jun 2024
C Command Injection	github.com/mudler/localai/pkg/model <2.16.0	Go	27 Jun 2024
H NULL Pointer Dereference	github.com/pingcap/tidb/pkg/expression <6.5.10 >=7.0.0	Go	26 Jun 2024
H Command Injection	github.com/hashicorp/go-getter <1.7.5	Go	26 Jun 2024
M Insertion of Sensitive Information into Log File	github.com/hashicorp/go-retryablehttp <0.7.7	Go	25 Jun 2024
H Path Traversal	github.com/go-skynet/localai/pkg/model <2.16.0	Go	25 Jun 2024
M Incorrect Implementation of Authentication Algorithm	github.com/pocketbase/pocketbase/models <0.22.14	Go	23 Jun 2024
M Incorrect Implementation of Authentication Algorithm	github.com/pocketbase/pocketbase/mails <0.22.14	Go	23 Jun 2024
M Incorrect Implementation of Authentication Algorithm	github.com/pocketbase/pocketbase/forms <0.22.14	Go	23 Jun 2024
M Incorrect Implementation of Authentication Algorithm	github.com/pocketbase/pocketbase/daos <0.22.14	Go	23 Jun 2024
M Incorrect Implementation of Authentication Algorithm	github.com/pocketbase/pocketbase/apis <0.22.14	Go	23 Jun 2024
M Improper Authorization	github.com/drakkan/sftpgo/v2/httpd >=2.2.0 <2.6.1	Go	21 Jun 2024
M Uncontrolled Resource Consumption	github.com/stacklok/minder/internal/providers/git/memboxfs <0.0.52	Go	21 Jun 2024
M Uncontrolled Resource Consumption	github.com/stacklok/minder/internal/providers/git <0.0.52	Go	21 Jun 2024
M Uncontrolled Resource Consumption	github.com/stacklok/minder/internal/config/server <0.0.52	Go	21 Jun 2024
H Path Traversal	github.com/mudler/localai/pkg/model <2.16.0	Go	21 Jun 2024
H SQL Injection	github.com/flipped-aurora/gin-vue-admin/server/service/system <2.6.6	Go	21 Jun 2024
L Improper Authorization	github.com/authzed/spicedb/internal/graph <1.33.1	Go	21 Jun 2024
H Denial of Service (DoS)	github.com/lightningnetwork/lightning-onion *	Go	21 Jun 2024
H Improper Privilege Management	github.com/adguardteam/adguardhome/internal/home >=0.93.0	Go	20 Jun 2024
H Improper Privilege Management	github.com/dnscrypt/dnscrypt-proxy/dnscrypt-proxy *	Go	20 Jun 2024
H Improper Input Validation	github.com/openshift/must-gather-operator/controllers/mustgather *	Go	20 Jun 2024
H Improper Input Validation	github.com/openshift/must-gather-operator/api/v1alpha1 *	Go	20 Jun 2024
H Password in Configuration File	github.com/rancher/rke/k8s <1.4.19 >=1.5.0-rc1 <1.5.10	Go	19 Jun 2024
H Password in Configuration File	github.com/rancher/rke/cmd <1.4.19 >=1.5.0-rc1 <1.5.10	Go	19 Jun 2024
H Password in Configuration File	github.com/rancher/rke/cluster <1.4.19 >=1.5.0-rc1 <1.5.10	Go	19 Jun 2024

APPLICATION

OPERATING SYSTEM