Security
فارسی
All products

go.etcd.io/etcd/v3

Go · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth onlyGHSA-VJG6-93FV-QV64 · GO-2024-2530Version ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd Go Low Fix reported
Etcd embed auto compaction retention negative value causing a compaction loop or a crashGHSA-PM3M-32R3-7MFH · GO-2024-2529Version ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd Go Low Fix reported
Etcd Gateway TLS endpoint validation only confirms TCP reachabilityGHSA-J86V-2VJR-FG8F · GO-2024-2528Version ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd Go Medium Fix reported
go.etcd.io/etcd Authentication BypassCVE-2018-16886 · GHSA-H6XX-PMXH-3WGPVersion ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd GoRed Hat High Fix reported
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadlineCVE-2026-73500 · GHSA-6VCH-Q96H-7GC3 go.etcd.io/etcd/client/pkg/v3go.etcd.io/etcd/v3 GoRed Hat High Fix reported
etcd: Watch API authorization bypass via open-ended range requestsCVE-2026-73499 · GHSA-XG4H-6GFC-H4M8 go.etcd.io/etcd/server/v3go.etcd.io/etcd/v3 GoRed Hat High Fix reported
etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requestsCVE-2026-44283 · GHSA-X35M-3GP4-4FH5 go.etcd.io/etcd/server/v3go.etcd.io/etcd/v3 GoRed Hat Low Fix reported
etcd: Nested etcd transactions bypass RBAC authorization checksCVE-2026-33343 · GHSA-RFX7-8W68-Q57QVersion ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd GoRed Hat Low Fix reported
etcd: Authorization bypasses in multiple APIsCVE-2026-33413 · GHSA-Q8M4-XHHV-38MGVersion ranges need review. go.etcd.io/etcd/v3go.etcd.io/etcd GoRed Hat High Fix reported
etcd Cross-site Request Forgery (CSRF)CVE-2018-1098 · GHSA-5GJM-FJ42-X983 go.etcd.io/etcd/v3Red Hat Enterprise Linux 7/etcd3 GoRed Hat High Fix reported
Etcd-io Improper Authentication vulnerabilityCVE-2021-28235 · GHSA-GMPH-WF7J-9GCM go.etcd.io/etcd/v3Logging Subsystem for Red Hat OpenShift/openshift-logging/lokistack-gateway-rhel8 GoRed Hat Critical No fix reported
etcd's WAL `ReadAll` method vulnerable to an entry with large index causing panicCVE-2020-15112 · GHSA-M332-53R6-2W93 go.etcd.io/etcd/v3Red Hat OpenStack Platform 15 (Stein)/etcd GoRed Hat Medium Fix reported
etcd vulnerable to TOCTOU of gateway endpoint authenticationGHSA-H8G9-6GVH-5MRC go.etcd.io/etcd/v3 Go Low Fix reported