Package · Debian

golang-github-gin-gonic-gin

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.3

CVE-2023-29401 Public exploit

Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin

The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. F…

github.com/gin-gonic/gin github.com/gin-gonic/gin github.com/gin-gonic/gin golang-github-gin-gonic-gin Debian Ubuntu Go

Jun 8, 2023
Medium 5.6

CVE-2023-26125

Improper input validation in github.com/gin-gonic/gin

Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. **Note:** Although …

github.com/gin-gonic/gin golang-github-gin-gonic-gin golang-github-gin-gonic-gin Debian Ubuntu Go

May 4, 2023