Read the docs

DigitalOcean

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

DigitalOcean records in CISA KEV

No DigitalOcean vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Do-markdownit 1 record HIGH Golang-nanoauth 1 record MEDIUM

Records

2 records

TI-2025-37177 CVE-2025-59717 · GHSA-2h8j-8r9p-849f

Type confusion in DigitalOcean @digitalocean/do-markdownit

Priority HIGH 75

In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2025-09-19 No fix listed CWE-843
TI-2020-18797 CVE-2020-36569 · GHSA-hrm3-3xm6-x33h

Authentication bypass in github.com/nanobox-io/golang-nanoauth

Priority MEDIUM 49

Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0088 Published 2022-12-27 Fixed in 0.0.0-20200131131040-063a3fb69896 CWE-287
Open these records in search →