Most recent entries from all

EUVD-2026-228829

fkie_cve-2020-36567

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.

GHSA-6vm3-jj99-7229 — Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines

Affected: Go: github.com/gin-gonic/gin

Gin is a HTTP web framework written in Go (Golang). Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.

gsd-2020-36567

RHSA-2023:0934 — Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update

gin: Unsanitized input in the default logger in github.com/gin-gonic/gin glob-parent: Regular Expression Denial of Service express: "qs" prototype poisoning causes the hang of the node process loader-utils: prototype pollution in function parseQuery in parseQuery.js loader-utils: Regular expression denial of service golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing json5: Prototype Pollution in JSON5 via Parse Method

UBUNTU-CVE-2020-36567

Affected: Ubuntu:18.04:LTS: golang-github-gin-gonic-gin, Ubuntu:20.04:LTS: golang-github-gin-gonic-gin

Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.