Skip to content
OpenAdvisories

Package · Wolfi

gitea-compat

21 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.5
    CVE-2026-27139

    FileInfo can escape from a Root in os

    On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by …

    Go standard library os langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Low 3.7
    CVE-2025-29923

    go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

    go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.2, go-redis potentially responds out of order when `CLIENT SETINFO` times out during connection establishment. This can happen when the client is con…

    Redis go-redis kots telegraf Ubuntu Azure Linux Wolfi Go
  • Low 3.1
    CVE-2024-51744

    Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

    golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and …

    golang-jwt jwt katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi Go