PkgSeer

Vulnerabilities

Last updated 40 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/casdoor/casdoor Casdoor arbitrary file write vulnerability Critical 9.1 4 years ago 1 day ago
github.com/casdoor/casdoor Casdoor arbitrary file write vulnerability in github.com/casdoor/casdoor Unknown 2 years ago 1 day ago
github.com/casdoor/casdoor SQL Injection in Casdoor High Risk 7.5 4 years ago 1 day ago
github.com/casdoor/casdoor SQL Injection in Casdoor in github.com/casdoor/casdoor Unknown 2 years ago 1 day ago
github.com/casdoor/casdoor Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check Critical 9.8 4 months ago 2 months ago
github.com/casdoor/casdoor Casdoor: Arbitrary file write possible through Local File System storage provider Medium Risk 5.9 4 months ago 2 months ago
github.com/casdoor/casdoor Casdoor: Arbitrary file write possible through Local File System storage provider in github.com/casdoor/casdoor Unknown 2 months ago 2 months ago
github.com/casdoor/casdoor Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check in github.com/casdoor/casdoor Unknown 2 months ago 2 months ago
github.com/casdoor/casdoor Casdoor SAML callback handler accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnRequest Critical 9.1 4 months ago 3 months ago
github.com/casdoor/casdoor Casdoor allows users to bypass configured MFA requirements Medium Risk 5.3 4 months ago 3 months ago
github.com/casdoor/casdoor Casdoor has an authentication bypass Critical 9.1 4 months ago 3 months ago
github.com/casdoor/casdoor Casdoor doesn't verify that a JWT used for token exchange is still active Critical 9.8 4 months ago 3 months ago
github.com/casdoor/casdoor Casdoor does not validate the AudienceRestriction element in SAML assertions Critical 9.8 4 months ago 3 months ago
github.com/casdoor/casdoor Casdoor doesn't enforce SAML assertion time bounds High Risk 7.5 4 months ago 3 months ago
github.com/casdoor/casdoor Casdoor doesn't verify that a JWT used for token exchange is still active in github.com/casdoor/casdoor Unknown 3 months ago 3 months ago
github.com/casdoor/casdoor Casdoor has an authentication bypass in github.com/casdoor/casdoor Unknown 3 months ago 3 months ago
github.com/casdoor/casdoor Casdoor doesn't enforce SAML assertion time bounds in github.com/casdoor/casdoor Unknown 3 months ago 3 months ago
github.com/casdoor/casdoor Casdoor does not validate the AudienceRestriction element in SAML assertions in github.com/casdoor/casdoor Unknown 3 months ago 3 months ago
github.com/casdoor/casdoor Casdoor allows users to bypass configured MFA requirements in github.com/casdoor/casdoor Unknown 3 months ago 3 months ago
github.com/casdoor/casdoor Casdoor SAML callback handler accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnRequest in github.com/casdoor/casdoor Unknown 3 months ago 3 months ago
github.com/casdoor/casdoor Casdoor vulnerable to Open Redirect Medium Risk 4.3 6 months ago 3 months ago
github.com/casdoor/casdoor Casdoor vulnerable to SSRF via crafted Webhook URL Medium Risk 4.7 6 months ago 3 months ago
github.com/casdoor/casdoor Casdoor vulnerable to Stored XSS via Application formCss / formSideHtml Low Risk 3.5 6 months ago 3 months ago
github.com/casdoor/casdoor Casdoor vulnerable to Stored XSS via Application formCss / formSideHtml in github.com/casdoor/casdoor Unknown 3 months ago 3 months ago
github.com/casdoor/casdoor Casdoor vulnerable to SSRF via crafted Webhook URL in github.com/casdoor/casdoor Unknown 3 months ago 3 months ago
github.com/casdoor/casdoor Casdoor vulnerable to Open Redirect in github.com/casdoor/casdoor Unknown 3 months ago 3 months ago
github.com/casdoor/casdoor Casdoor SCIM User Creation Endpoint scim.go HandleScim authorization in github.com/casdoor/casdoor Unknown 1 year ago 7 months ago
github.com/casdoor/casdoor Casdoor CORS misconfiguration (GHSL-2024-035) in github.com/casdoor/casdoor Unknown 2 years ago 7 months ago
github.com/casdoor/casdoor Casdoor has reflected XSS in QrCodePage.js (GHSL-2024-036) in github.com/casdoor/casdoor Unknown 2 years ago 7 months ago
github.com/casdoor/casdoor casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification in github.com/casdoor/casdoor Unknown 2 years ago 7 months ago
github.com/casdoor/casdoor Casdoor arbitrary file deletion vulnerability via uploadFile function in github.com/casdoor/casdoor Unknown 2 years ago 7 months ago
github.com/casdoor/casdoor Casdoor is vulnerable to Improper Authorization High Risk 7.2 12 months ago 11 months ago
github.com/casdoor/casdoor Casdoor is vulnerable to Improper Authorization in github.com/casdoor/casdoor Unknown 11 months ago 11 months ago
github.com/casdoor/casdoor Casdoor SCIM User Creation Endpoint scim.go HandleScim authorization in github.com/casdoor/casdoor High Risk 7.3 1 year ago 1 year ago
github.com/casdoor/casdoor Casdoor CORS misconfiguration (GHSL-2024-035) High Risk 8.1 2 years ago 2 years ago
github.com/casdoor/casdoor Casdoor has reflected XSS in QrCodePage.js (GHSL-2024-036) Medium Risk 6.1 2 years ago 2 years ago
github.com/casdoor/casdoor Casdoor arbitrary file deletion vulnerability via uploadFile function High Risk 8.1 3 years ago 2 years ago
github.com/casdoor/casdoor casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification Low Risk 3.7 2 years ago 2 years ago
github.com/casdoor/casdoor Casdoor Cross-Site Request Forgery vulnerability Medium Risk 6.5 3 years ago 2 years ago
Data courtesy of OSV.dev
Page 1