Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/gin-gonic/gin

5 known vulnerabilities (1 critical, 2 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 critical, 2 high, 2 medium
Registry
pkg.go.dev

Advisories 5

  • CVE-2019-25211Critical 9.1

    parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g…

    Affected: fixed in 1.6.0.

  • CVE-2023-29401Medium 4.3

    Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin

    Affected: from 1.3.1-0.20190301021747-ccb9e902956d, fixed in 1.9.1; from 1.3.1-0.20190301021747-ccb9e902956d, fixed in 1.9.1.

  • CVE-2023-26125Medium 5.6

    Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a…

    Affected: fixed in 1.9.0.

  • Arbitrary log line injection in github.com/gin-gonic/gin

    Affected: fixed in 1.6.0; fixed in 1.6.0.

  • HTTP Response Splitting

    Affected: fixed in 1.7.7.