Gin-Gonic Gin
4 CVEs affecting Gin-Gonic Gin. Latest disclosed: 2023-06-08. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36567 | High | 7.5 | 2022-12-27 | Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines. |
CVE-2020-28483 | High | 7.1 | 2021-01-20 | This affects all versions of package github.com/gin-gonic/gin. When gin is exposed directly to the internet, a client's IP can be spoofed by setting the X-Forw… |
CVE-2023-26125 | Medium | 5.6 | 2023-05-04 | Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted re… |
CVE-2023-29401 | Medium | 4.3 | 2023-06-08 | The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition heade… |