github.com/concourse/concourse
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Concourse login flow has an open redirect issue | github.com/concourse/concourse | Go | Low | Fix reported | |
| GitLab auth uses full name instead of username as user ID, allowing impersonation | github.com/concourse/concoursegithub.com/concourse/dex | Go | High | Fix reported | |
| Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution | github.com/concourse/concourse | Go | Medium | Fix reported | |
| Pivotal Concourse SQL Injection Vulnerability | github.com/concourse/concourse | Go | High | Fix reported | |
| Pivotal Concourse Open Redirect in Login Flow | github.com/concourse/concourse | Go | Medium | Fix reported |