Skip to content

Vendor

go-aah vulnerabilities

1 published CVE affecting go-aah, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of go-aah alerts

Products

Latest go-aah CVEs

Newest publication first

  1. CVE-2020-36559 Path Traversal in aahframe.work

    Published
    HighCVSS 7.5 EPSS 1.2%

    Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.