Skip to content
OpenAdvisories

Package · Azure Linux

packer

74 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 2.3

    go-git: Improper single-quote escaping in go-git SSH transport

    go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single quotes embedded inside…

  • Low 3.1

    Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

    golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and …