Search Results (62 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-29509 2 Golang, Netapp 2 Go, Trident 2024-11-21 9.8 Critical
The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
CVE-2020-27846 4 Fedoraproject, Grafana, Redhat and 1 more 7 Fedora, Grafana, Enterprise Linux and 4 more 2024-11-21 9.8 Critical
A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.