repos

Jan 11, 2023 GO-2023-1956 +1 more

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jan 4, 2023 GO-2023-1463 +3 more

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 15, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jul 29, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jul 21, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jun 15, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 30, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 27, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 25, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

+ const LIMIT

+ type Config struct

+ Credential Credential

+ EndPoint string

+ Type string

+ Version string

+ type Credential struct

+ Password string

+ Username string

type ItemResult

+ ContinuationToken string

+ type ProjectRequest struct

+ ContinueToken string

+ Limit int

+ Name string

+ Page int

+ type RepoRequest struct

+ ContinueToken string

+ Limit int

+ Page int

+ Repo string

+ Search string

+ type RepoResponse struct

+ ContinueToken string

+ Items []string

+ Total int

Mar 7, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Feb 14, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

type HttpClient

+ func (h *HttpClient) GetNameResult(url string) ([]NameResult, error)

type NameResult

+ ProjectID int

Jan 12, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Dec 8, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

+ const BaseUrl

+ const ComponentUrl

+ const RepoUrl

+ func NewDockerRegistryClient(endpoint, username, password string) *dockerRegistryClient

+ func NewHarborClient(endpoint, username, password string) *harborClient

+ func NewNexusClient(endpoint, username, password string) *nexusClient

+ type BasicTransport struct

+ Password string

+ Transport http.RoundTripper

+ URL string

+ Username string

+ func (t *BasicTransport) RoundTrip(req *http.Request) (*http.Response, error)

+ type HttpClient struct

+ Host string

+ Password string

+ Username string

+ func (h *HttpClient) Do(request *http.Request) (body []byte, resp *http.Response, err error)

+ func (h *HttpClient) Get(endpoint string) ([]byte, *http.Response, error)

+ func (h *HttpClient) NewRequest(method, endpoint string) (request *http.Request, err error)

+ type ItemResult struct

+ Items []NameResult

+ type NameResult struct

+ Format string

+ Name string

+ Version string