Skip to content
OpenAdvisories

Package · Go

github.com/weaveworks/weave

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2020-11091

    Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements

    In Weave Net before version 2.6.3, an attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert themselves as a fake service. In a cluster with an IPv4 internal network, if IPv6 is not totally di…

    weaveworks weave github.com/weaveworks/weave Go