Security
فارسی
All products

github.com/neuvector/neuvector

Go · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
NeuVector admin account has insecure default passwordCVE-2025-8077 · GHSA-8PXW-9C75-6W56Version ranges need review. github.com/neuvector/neuvector Go Critical Fix reported
NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)CVE-2025-66001 · GHSA-4JJ9-CGQC-X9H5Version ranges need review. github.com/neuvector/neuvector Go High Fix reported
NeuVector telemetry sender is vulnerable to MITM and DoSCVE-2025-54470 · GHSA-QQJ3-G7MX-5P4WVersion ranges need review. github.com/neuvector/neuvector Go High Fix reported
NeuVector is shipping cryptographic material into its binaryCVE-2025-54471 · GHSA-H773-7GF7-9M2XVersion ranges need review. github.com/neuvector/neuvector Go Medium Fix reported
NeuVector Enforcer is vulnerable to Command Injection and Buffer overflowCVE-2025-54469 · GHSA-C8G6-QRWH-M3VPVersion ranges need review. github.com/neuvector/neuvector Go Critical Fix reported
NeuVector process with sensitive arguments lead to leakageCVE-2025-54467 · GHSA-W54X-XFXG-4GXQVersion ranges need review. github.com/neuvector/neuvector Go Medium Fix reported
NeuVector has an insecure password storage and is vulnerable to rainbow attackCVE-2025-53884 · GHSA-8FF6-PC43-JWV3Version ranges need review. github.com/neuvector/neuvector Go Medium Fix reported
JWT token compromise can allow malicious actions including Remote Code Execution (RCE) CVE-2023-32188 · GHSA-622H-H2P8-743X github.com/neuvector/neuvector Go Critical Fix reported
JWT token compromise can allow malicious actions including Remote Code Execution (RCE) in github.com/neuvector/neuvectorCVE-2023-22644 · GO-2024-3201 github.com/neuvector/neuvector Go Unknown Fix reported