Skip to content
OpenAdvisories

Package · Go

github.com/beego/beego

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-55885

    Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames

    beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3…

    beego beego github.com/beego/beego/v2 github.com/beego/beego Go
  • Medium 4.7
    CVE-2019-16354

    Beego has a file creation race condition

    The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.

    github.com/beego/beego github.com/astaxie/beego Go