Skip to content
OpenAdvisories

Package · Go

github.com/pandatix/go-cvss

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    Out-of-bounds Read in go-cvss

    go-cvss is a Go module to manipulate Common Vulnerability Scoring System (CVSS). In affected versions when a full CVSS v2.0 vector string is parsed using `ParseVector`, an Out-of-Bounds Read is possible due to a lack of tests. The Go module will then panic. T…