Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Gorillatoolkit Clear all filters
TI-2017-14212 CVE-2017-20146 · GHSA-jcr6-mmjj-pchw

Improper access control in github.com/gorilla/handlers

Priority MEDIUM 50

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00765 Published 2022-12-27 Partial fix · 1.3.0 CWE-346
TI-2020-16885 CVE-2020-27813 · GHSA-3xh2-74w9-5vxm

Integer overflow in golang-github-gorilla-websocket

Priority LOW 37

An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02188 Published 2020-12-02 Partial fix · 1.4.1 CWE-190