Skip to content
OpenAdvisories

Package · Go

github.com/jaegertracing/jaeger

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    GHSA-2w8w-qhg4-f78j

    A stored XSS in jaeger UI might allow an attacker who controls a trace to perform arbitrary jaeger queries

    Related UI vulnerability advisory: https://github.com/jaegertracing/jaeger-ui/security/advisories/GHSA-vv24-rm95-q56r ### Summary Jaeger UI is using the `json-markup` dependency to display span attributes and resources. This dependency is not sanitising keys …

    github.com/jaegertracing/jaeger Go