Skip to content
OpenAdvisories

Package · Go

github.com/beego/beego/v2

10 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.9

    Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames

    beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3…

  • Medium 6.1

    Cross-site Scripting in Beego

    Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.