Read the docs

DigitalOcean

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

DigitalOcean records in CISA KEV

No DigitalOcean vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Do-markdownit 1 record HIGH Golang-nanoauth 1 record MEDIUM

Records

1 record in Golang-nanoauth · all components

TI-2020-18797 CVE-2020-36569 · GHSA-hrm3-3xm6-x33h

Authentication bypass in github.com/nanobox-io/golang-nanoauth

Priority MEDIUM 49

Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0088 Published 2022-12-27 Fixed in 0.0.0-20200131131040-063a3fb69896 CWE-287
Open these records in search →