Go Vulnerability Database
Data about new vulnerabilities come directly from Go package maintainers or sources such as MITRE and GitHub. Reports are curated by the Go Security team. Learn more at go.dev/security/vuln.
Search
Recent Reports
- CVE-2024-21583
- Affects: github.com/gitpod-io/gitpod
- Published: Jul 22, 2024
- Unreviewed
CVE-2024-21583 in github.com/gitpod-io/gitpod
- CVE-2024-21527
- Affects: github.com/gotenberg/gotenberg/v7, github.com/gotenberg/gotenberg/v8
- Published: Jul 22, 2024
- Unreviewed
CVE-2024-21527 in github.com/gotenberg/gotenberg
- CVE-2024-5321, GHSA-82m2-cv7p-4m75
- Affects: k8s.io/kubernetes
- Published: Jul 22, 2024
- Unreviewed
Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
- CVE-2024-41111, GHSA-hc5w-gxxr-w8x8
- Affects: github.com/bishopfox/sliver
- Published: Jul 22, 2024
- Unreviewed
Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver
- CVE-2024-39911
- Affects: github.com/1Panel-dev/1Panel
- Published: Jul 22, 2024
- Unreviewed
1Panel SQL injection in github.com/1Panel-dev/1Panel
If you don't see an existing, public Go vulnerability in a publicly importable package in our database, please let us know.