Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/gitpod-io/gitpod

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
pkg.go.dev

Advisories 2

  • CVE-2024-21583Medium 4.1

    Versions of the package github.com/gitpod-io/gitpod/components/server/go/pkg/lib before main-gha.27122; versions of the package…

    Affected: all versions; through 0.8.0.

  • CVE-2023-32766Medium 6.1

    Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode…

    Affected: fixed in 2022.11.3.