GCVE - cpe:2.3:a:netapp:beegfs_csi_driver:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:netapp:beegfs_csi_driver:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Netapp (`f19678f6-cb27-5a55-8852-34b249f80ef9`)
Product	Beegfs Csi Driver (`463e366d-54ca-59fc-a1c6-c063fbac8ed9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:docker/netapp/beegfs-csi-driver`	purl2cpe	2026-06-01 10:11:58.313416
`pkg:github/netapp/beegfs-csi-driver`	purl2cpe	2026-06-01 10:11:58.313419

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-29526`	vulnerable	2026-06-08 05:42:48.423271	Details available Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible. Published: 2022-06-22T13:15:32.000Z Updated: 2024-08-03T06:26:06.342Z Open on db.gcve.eu Reference links https://groups.google.com/g/golang-announce https://github.com/golang/go/issues/52313 https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23806`	vulnerable	2026-06-08 05:40:58.529759	Details available Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element. Published: 2022-02-11T00:00:00.000Z Updated: 2024-08-03T03:51:45.994Z Open on db.gcve.eu Reference links https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html https://www.oracle.com/security-alerts/cpujul2022.html https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ https://security.netapp.com/advisory/ntap-20220225-0006/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23773`	vulnerable	2026-06-08 05:40:58.501689	Details available cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags. Published: 2022-02-11T00:16:08.000Z Updated: 2024-08-03T03:51:45.976Z Open on db.gcve.eu Reference links https://www.oracle.com/security-alerts/cpujul2022.html https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ https://security.netapp.com/advisory/ntap-20220225-0006/ https://security.gentoo.org/glsa/202208-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23772`	vulnerable	2026-06-08 05:40:58.498829	Details available Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. Published: 2022-02-11T00:11:15.000Z Updated: 2024-08-03T03:51:46.050Z Open on db.gcve.eu Reference links https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html https://www.oracle.com/security-alerts/cpujul2022.html https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ https://security.netapp.com/advisory/ntap-20220225-0006/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.