pkg:Go/github.com/cubefs/cubefs

All known vulnerabilities

• MEDIUM6.5CVE-2023-46740Insecure random string generator used for sensitive data in github.com/cubefs/cubefs
  from 0
• MEDIUM6.5CVE-2023-46740Insecure random string generator used for sensitive data in github.com/cubefs/cubefs
  from 0, < 3.3.1
• MEDIUM6.5CVE-2023-46739CubeFS timing attack can leak user passwords in github.com/cubefs/cubefs
  from 0, < 3.3.1
• MEDIUM6.5CubeFS timing attack can leak user passwords in github.com/cubefs/cubefs
  from 0
• MEDIUM6.5Authenticated users can crash the CubeFS servers with maliciously crafted requests in github.com/cubefs/cubefs
  from 0
• MEDIUM6.5Authenticated users can crash the CubeFS servers with maliciously crafted requests in github.com/cubefs/cubefs
  from 0, < 3.3.1
• MEDIUM6.5CubeFS allows Kubernetes cluster-level privilege escalation
  from 0, <= 3.2.1
• MEDIUM4.8CubeFS leaks users key in logs in github.com/cubefs/cubefs
  from 0, < 3.3.1
• MEDIUM4.8CubeFS leaks users key in logs in github.com/cubefs/cubefs
  from 0
• MEDIUM4.8CubeFS leaks magic secret key when starting Blobstore access service in github.com/cubefs/cubefs
  from 0, < 3.3.1
• MEDIUM4.8CubeFS leaks magic secret key when starting Blobstore access service in github.com/cubefs/cubefs
  from 0