Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2016-11084An issue was discovered in Mattermost Server before 2.1.0.Go · github.com/mattermost/mattermost-server · fixed in 2.1.0+incompatible, 2.1.0
- CVE-2016-11083An issue was discovered in Mattermost Server before 2.2.0.Go · github.com/mattermost/mattermost-server · fixed in 2.2.0+incompatible, 2.2.0
- CVE-2016-11082An issue was discovered in Mattermost Server before 2.2.0.Go · github.com/mattermost/mattermost-server · fixed in 2.2.0, 2.2.0+incompatible
- CVE-2016-11081An issue was discovered in Mattermost Server before 2.2.0.Go · github.com/mattermost/mattermost-server · fixed in 2.2.0+incompatible, 2.2.0
- CVE-2016-11080An issue was discovered in Mattermost Server before 3.0.0.Go · github.com/mattermost/mattermost-server · fixed in 3.0.0+incompatible, 3.0.0
- CVE-2016-11079An issue was discovered in Mattermost Server before 3.0.0.Go · github.com/mattermost/mattermost-server · fixed in 3.0.0+incompatible, 3.0.0
- CVE-2016-11078An issue was discovered in Mattermost Server before 3.0.0.Go · github.com/mattermost/mattermost-server · fixed in 3.0.0, 3.0.0+incompatible
- CVE-2016-11077An issue was discovered in Mattermost Server before 3.0.0.Go · github.com/mattermost/mattermost-server · fixed in 3.0.0, 3.0.0+incompatible
- CVE-2016-11076An issue was discovered in Mattermost Server before 3.0.0.Go · github.com/mattermost/mattermost-server · fixed in 3.0.0+incompatible, 3.0.0
- CVE-2016-11075An issue was discovered in Mattermost Server before 3.0.0.Go · github.com/mattermost/mattermost-server · fixed in 2.0.1-0.20160310160916-26ad6d2c7696
- CVE-2016-11074An issue was discovered in Mattermost Server before 3.0.0.Go · github.com/mattermost/mattermost-server · fixed in 3.0.0+incompatible, 3.0.0
- CVE-2016-11073An issue was discovered in Mattermost Server before 3.0.0.Go · github.com/mattermost/mattermost-server · fixed in 3.0.0+incompatible, 3.0.0
- CVE-2016-11072An issue was discovered in Mattermost Server before 3.0.2.Go · github.com/mattermost/mattermost-server · fixed in 3.0.2, 3.0.2+incompatible
- CVE-2016-11071An issue was discovered in Mattermost Server before 3.1.0.Go · github.com/mattermost/mattermost-server · fixed in 3.1.0, 3.1.0+incompatible
- CVE-2016-11070An issue was discovered in Mattermost Server before 3.1.0.Go · github.com/mattermost/mattermost-server · fixed in 3.1.0, 3.1.0+incompatible
- CVE-2016-11069An issue was discovered in Mattermost Server before 3.2.0.Go · github.com/mattermost/mattermost-server · fixed in 3.2.0, 3.2.0+incompatible
- CVE-2016-11068An issue was discovered in Mattermost Server before 3.2.0.Go · github.com/mattermost/mattermost-server · fixed in 3.2.0, 3.2.0+incompatible
- CVE-2016-11067An issue was discovered in Mattermost Server before 3.2.0.Go · github.com/mattermost/mattermost-server · fixed in 3.2.0+incompatible, 3.2.0
- CVE-2016-11066An issue was discovered in Mattermost Server before 3.2.0.Go · github.com/mattermost/mattermost-server · fixed in 3.1.1
- CVE-2020-10750Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store Go · github.com/jaegertracing/jaeger · fixed in 1.18.1
- CVE-2016-11063An issue was discovered in Mattermost Server before 3.5.1.Go · github.com/mattermost/mattermost-server · fixed in 3.5.1+incompatible, 3.5.1
- CVE-2017-18918An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5.Go · github.com/mattermost/mattermost-server · fixed in 3.6.5, 3.7.3, 3.6.5+incompatible and more
- CVE-2017-18907An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2.Go · github.com/mattermost/mattermost-server · fixed in 3.9.2-0.20170714014920-312269ad0bd1, 3.10.2, 3.10.2+incompatible
- CVE-2017-18916An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.Go · github.com/mattermost/mattermost-server · fixed in 3.7.5+incompatible, 3.8.2+incompatible, 3.6.7-0.20170420152529-0968e4079e0a and more
- CVE-2017-18917An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.Go · github.com/mattermost/mattermost-server · fixed in 3.7.5-0.20170421192444-247cd1e51a8c, 3.8.2, 3.8.2+incompatible
- CVE-2017-18906An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when Single Sign-On OAuth2 is used.Go · github.com/mattermost/mattermost-server · fixed in 3.10.2+incompatible, 3.9.2-0.20170714134023-b17fca0d5ee7, 3.10.2
- CVE-2017-18905An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidatiGo · github.com/mattermost/mattermost-server · fixed in 3.9.2+incompatible, 3.10.2+incompatible, 3.9.2 and more
- CVE-2017-18908An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2.Go · github.com/mattermost/mattermost-server · fixed in 3.9.1-rc1, 3.10.1, 3.9.1-rc1+incompatible and more
- CVE-2017-18915An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.Go · github.com/mattermost/mattermost-server · fixed in 3.6.7-0.20170420152529-0968e4079e0a, 3.7.5, 3.8.2 and more
- CVE-2017-18909An issue was discovered in Mattermost Server before 3.9.0 when SAML is used.Go · github.com/mattermost/mattermost-server · fixed in 3.8.1-0.20170504181128-4f074fed0d65