Golang Nanoauth
Approved changes feed: RSS · Atom
cpe:2.3:a:digitalocean:golang-nanoauth:*:*:*:*:*:go:*:*
part: a version: * update: *
| Vendor | Digitalocean (cb7391e9-6e4c-5d93-896a-a91ac90d90da) |
|---|---|
| Product | Golang Nanoauth (2d659f03-ff20-5cb5-afc2-da8db912f327) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | go |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nanobox-io/golang-nanoauth |
purl2cpe | 2026-06-01 10:14:49.980764 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36569 |
vulnerable | 2026-06-08 05:25:49.156499 |
Authentication bypass in github.com/nanobox-io/golang-nanoauth
Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token.
Published: 2022-12-27T21:12:58.427Z
Updated: 2025-04-11T23:03:20.527Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.