PkgSeer

Vulnerabilities

Last updated 53 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
toolchain Checksum bypass for golang.org/fips140 in cmd/go Unknown 9 hours ago 8 hours ago
toolchain Checksum database bypass for golang.org/toolchain in cmd/go Unknown 9 hours ago 8 hours ago
toolchain Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go Unknown 5 months ago 16 days ago
toolchain Invoking "go tool pack" does not sanitize output paths in cmd/go Unknown 5 months ago 16 days ago
toolchain Malicious module proxy can bypass checksum database in cmd/go Unknown 5 months ago 1 month ago
toolchain Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb Unknown 1 month ago 1 month ago
toolchain Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog Unknown 1 month ago 1 month ago
toolchain Arbitrary file write using cgo pkg-config directive in cmd/go Unknown 8 months ago 2 months ago
toolchain Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile Unknown 6 months ago 2 months ago
toolchain Missing bound checks can lead to memory corruption in safe Go in cmd/compile Unknown 6 months ago 2 months ago
toolchain Potential code smuggling via doc comments in cmd/cgo Unknown 8 months ago 4 months ago
toolchain Unexpected code execution when invoking toolchain in cmd/go Unknown 8 months ago 4 months ago
toolchain Code execution vulnerability in SWIG code generation in cmd/go Unknown 6 months ago 4 months ago
@automation-toolchain/f5-cloud-libs Malicious code in @automation-toolchain/f5-cloud-libs (npm) Unknown 5 months ago 5 months ago
toolchain Code injection via go command with cgo in cmd/go Unknown 3 years ago 8 months ago
toolchain Output of "go env" does not sanitize values in cmd/go Unknown 2 years ago 8 months ago
toolchain Unexpected command execution in untrusted VCS repositories in cmd/go Unknown 1 year ago 8 months ago
toolchain Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go Unknown 3 years ago 8 months ago
toolchain Arbitrary code execution via go.mod toolchain directive in cmd/go Unknown 3 years ago 8 months ago
toolchain Arbitrary code execution during build on Darwin in cmd/go Unknown 2 years ago 8 months ago
toolchain Command 'go get' may unexpectedly fallback to insecure git in cmd/go Unknown 2 years ago 8 months ago
toolchain Arbitrary code execution during build via line directives in cmd/go Unknown 3 years ago 8 months ago
toolchain Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go Unknown 3 years ago 8 months ago
sunruse-influx-toolchain Malicious code in sunruse-influx-toolchain (npm) Unknown 1 year ago 1 year ago
build-toolchain Malicious code in build-toolchain (npm) Unknown 1 year ago 1 year ago
toolchain Arbitrary code execution during build on darwin in cmd/go Unknown 1 year ago 1 year ago
toolchain GOAUTH credential leak in cmd/go Unknown 1 year ago 1 year ago
toolchain Arbitrary code injection via the go command with cgo on Windows in cmd/go Unknown 5 years ago 2 years ago
toolchain Remote command execution via "go get" in cmd/go Unknown 4 years ago 2 years ago
toolchain Remote command execution via "go get" with "-u" flag in cmd/go Unknown 4 years ago 2 years ago
toolchain Directory traversal via "go get" command in cmd/go Unknown 4 years ago 2 years ago
toolchain Remote command execution via "go get" command with cgo in cmd/go Unknown 4 years ago 2 years ago
toolchain Remote command execution via "go get" command with "-insecure" option in cmd/go Unknown 4 years ago 2 years ago
toolchain Buffer overflow in WASM modules in misc/wasm and cmd/link Unknown 4 years ago 2 years ago
toolchain Incorrect access control in the go command in cmd/go/internal/modfetch Unknown 4 years ago 2 years ago
toolchain Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo Unknown 4 years ago 2 years ago
toolchain Arbitrary code execution via the go command with cgo in cmd/go Unknown 4 years ago 2 years ago
my-toolchain Malicious code in my-toolchain (npm) Unknown 4 years ago 2 years ago
Data courtesy of OSV.dev
Page 1