Go Vulnerability Database
Data about new vulnerabilities come directly from Go package maintainers or sources such as MITRE and GitHub. Reports are curated by the Go Security team. Learn more at go.dev/security/vuln.
Search
Recent Reports
- CVE-2024-45436, GHSA-846m-99qv-67mg
- Affects: github.com/ollama/ollama
- Published: Aug 30, 2024
- Unreviewed
Ollama can extract members of a ZIP archive outside of the parent directory in github.com/ollama/ollama
- CVE-2024-45054, GHSA-mgwr-h7mv-fh29
- Affects: github.com/hwameistor/hwameistor
- Published: Aug 30, 2024
- Unreviewed
Hwameistor Potential Permission Leakage of Cluster Level in github.com/hwameistor/hwameistor
- CVE-2024-45043, GHSA-prf6-xjxh-p698
- Affects: github.com/open-telemetry/opentelemetry-collector-contrib/receiver/awsfirehosereceiver
- Published: Aug 30, 2024
- Unreviewed
OpenTelemetry Collector module AWS Firehose Receiver Authentication Bypass Vulnerability in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/awsfirehosereceiver
- CVE-2024-43798, GHSA-38jh-8h67-m7mj
- Affects: github.com/jpillora/chisel
- Published: Aug 30, 2024
- Unreviewed
Chisel's AUTH environment variable not respected in server entrypoint in github.com/jpillora/chisel
- CVE-2024-45244, GHSA-48gg-32q2-4r6m
- Affects: github.com/hyperledger/fabric
- Published: Aug 30, 2024
- Unreviewed
Hyperledger Fabric does not verify request has a timestamp within the expected time window in github.com/hyperledger/fabric
If you don't see an existing, public Go vulnerability in a publicly importable package in our database, please let us know.