Goreleaser

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-23840 Jan 30, 17:15 Go MEDIUM POC PATCH This Month

GoReleaser builds Go binaries for several platforms, creates a GitHub release and then pushes a Homebrew formula to a tap repository. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Goreleaser

NVD GitHub

CVSS 3.1

5.5

EPSS

0.3%

CVE-2023-32698 May 30, 04:15 Go HIGH POC PATCH This Week

nFPM is an alternative to fpm. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. Public exploit code available.

Privilege Escalation Nfpm Goreleaser

NVD GitHub

CVSS 3.1

7.1

EPSS

0.4%

CVE-2024-23840 Go

EPSS 0% CVSS 5.5

MEDIUM POC PATCH This Month

Information Disclosure Goreleaser

NVD GitHub

CVE-2023-32698 Go

EPSS 0% CVSS 7.1

HIGH POC PATCH This Week

nFPM is an alternative to fpm. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. Public exploit code available.

Privilege Escalation Nfpm Goreleaser

NVD GitHub