All products

go.etcd.io/etcd

Go · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth onlyGHSA-VJG6-93FV-QV64 · GO-2024-2530Version ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd Go Low Fix reported
Etcd pkg Insecure ciphers are allowed by defaultGHSA-5X4G-Q5RC-36JP · GO-2024-2527 go.etcd.io/etcd/client/pkg/v3go.etcd.io/etcd Go Low Fix reported
Etcd Gateway TLS authentication only applies to endpoints detected in DNS SRV recordsCVE-2020-15136 · GHSA-WR2V-9RPQ-C35Q go.etcd.io/etcdRed Hat Enterprise Linux 7/etcd GoRed Hat Medium Fix reported
Etcd embed auto compaction retention negative value causing a compaction loop or a crashGHSA-PM3M-32R3-7MFH · GO-2024-2529Version ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd Go Low Fix reported
Etcd Gateway TLS endpoint validation only confirms TCP reachabilityGHSA-J86V-2VJR-FG8F · GO-2024-2528Version ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd Go Medium Fix reported
Etcd Gateway can include itself as an endpoint resulting in resource exhaustionCVE-2020-15114 · GHSA-2XHQ-GV6C-P224 go.etcd.io/etcdRed Hat Enterprise Linux 7/etcd GoRed Hat High Fix reported
go.etcd.io/etcd Authentication BypassCVE-2018-16886 · GHSA-H6XX-PMXH-3WGPVersion ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd GoRed Hat High Fix reported
DNS Rebinding in etcdCVE-2018-1099 · GHSA-WF43-55JJ-VWQ8 go.etcd.io/etcdRed Hat Enterprise Linux 7/etcd3 GoRed Hat Medium Fix reported
etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requestsCVE-2026-44283 · GHSA-X35M-3GP4-4FH5 go.etcd.io/etcd/server/v3go.etcd.io/etcd/v3 GoRed Hat Low Fix reported
etcd: Nested etcd transactions bypass RBAC authorization checksCVE-2026-33343 · GHSA-RFX7-8W68-Q57QVersion ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd GoRed Hat Low Fix reported
etcd: Authorization bypasses in multiple APIsCVE-2026-33413 · GHSA-Q8M4-XHHV-38MGVersion ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd GoRed Hat High Fix reported
Panic due to malformed WALs in go.etcd.io/etcdCVE-2020-15106 · GHSA-P4G4-WGRH-QRG2 go.etcd.io/etcdRed Hat OpenStack Platform 15 (Stein)/etcd GoRed Hat Low Fix reported