Skip to content
OpenAdvisories

Package · Go

github.com/artifacthub/hub

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2023-45823

    Arbitrary file read in Artifact Hub

    Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. During a security audit of Artifact Hub's code base a security researcher identified a bug in which by using symbolic links…

    artifacthub hub github.com/artifacthub/hub Go
  • Low 3.7
    CVE-2023-45822

    Unsafe rego built-in allowed in Artifact Hub

    Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. During a security audit of Artifact Hub's code base a security researcher identified a bug in which a default unsafe rego b…

    artifacthub hub github.com/artifacthub/hub Go
  • Medium 5.4
    CVE-2023-45821

    Incorrect Docker Hub registry check in Artifact Hub

    Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. During a security audit of Artifact Hub's code base a security researcher identified a bug in which the `registryIsDockerHu…

    artifacthub hub github.com/artifacthub/hub Go