Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: DigitalOcean Clear all filters
TI-2025-37177 CVE-2025-59717 · GHSA-2h8j-8r9p-849f

Type confusion in DigitalOcean @digitalocean/do-markdownit

Priority HIGH 75

In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2025-09-19 No fix listed CWE-843
TI-2020-18797 CVE-2020-36569 · GHSA-hrm3-3xm6-x33h

Authentication bypass in github.com/nanobox-io/golang-nanoauth

Priority MEDIUM 49

Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0088 Published 2022-12-27 Fixed in 0.0.0-20200131131040-063a3fb69896 CWE-287