Known Vulnerabilities for Gin by Gin-gonic

Listed below are 4 of the newest known vulnerabilities associated with "Gin" by "Gin-gonic".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE	Shortened Description	Severity	Publish Date	Last Modified
CVE-2023-29401 json	The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can c...	4.3 - MEDIUM	2023-06-08	2023-06-16
CVE-2023-26125 json	Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an atta...	7.3 - HIGH	2023-05-04	2023-11-07
CVE-2020-36567 json	Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary...	7.5 - HIGH	2022-12-27	2023-11-07
CVE-2020-28483 json	This affects all versions of package github.com/gin-gonic/gin. When gin is exposed directly to the internet, a client's IP ca...	7.1 - HIGH	2021-01-20	2021-05-11

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version
Application	Gin-gonic	Gin	1.6.3
Application	Gin-gonic	Gin	1.6.2
Application	Gin-gonic	Gin	1.6.1
Application	Gin-gonic	Gin	1.6.0
Application	Gin-gonic	Gin	1.5.0
Application	Gin-gonic	Gin	1.4.0
Application	Gin-gonic	Gin	1.3.0
Application	Gin-gonic	Gin	1.2
Application	Gin-gonic	Gin	1.1.4
Application	Gin-gonic	Gin	1.1.3
Application	Gin-gonic	Gin	1.1.2
Application	Gin-gonic	Gin	1.1.1
Application	Gin-gonic	Gin	1.1
Application	Gin-gonic	Gin	1.0
Application	Gin-gonic	Gin	1.0
Application	Gin-gonic	Gin	1.0
Application	Gin-gonic	Gin	0.6
Application	Gin-gonic	Gin	0.5
Application	Gin-gonic	Gin	0.4
Application	Gin-gonic	Gin	0.3

Results limited to 20 most recent known configurations