github.com/cubefs/cubefs
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| CubeFS leaks users key in logs | github.com/cubefs/cubefs | Go | Medium | Fix reported | |
| Authenticated users can crash the CubeFS servers with maliciously crafted requests | github.com/cubefs/cubefs | Go | High | Fix reported | |
| CubeFS timing attack can leak user passwords | github.com/cubefs/cubefs | Go | High | Fix reported | |
| Insecure random string generator used for sensitive data | github.com/cubefs/cubefs | Go | High | Fix reported | |
| CubeFS leaks magic secret key when starting Blobstore access service | github.com/cubefs/cubefs | Go | Medium | Fix reported | |
| CubeFS allows Kubernetes cluster-level privilege escalation | github.com/cubefs/cubefs | Go | Medium | No fix reported |