An open index of dependabot pull requests across open source projects.

github.com/gin-gonic/gin

Ecosystem:
go
Package URL:
pkg:golang/github.com/gin-gonic/gin
Total PRs:
1,652 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
943 repositories
Unique Repos (30 days):
8 repositories
Security Advisories
Inconsistent Interpretation of HTTP Requests in github.com/gin-gonic/gin
GHSA-h395-qcrw-5vmq CVE-2020-28483 HIGH published almost 5 years ago • updated about 2 months ago
When gin is exposed directly to the internet, a client's IP can be spoofed by setting the X-Forwarded-For header. This affects all versions of pack...
Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function
GHSA-2c4m-59x9-fr2g CVE-2023-29401 MODERATE published about 3 years ago • updated 4 days ago
The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Dispo...
Improper input validation in github.com/gin-gonic/gin
GHSA-3vp4-m3rf-835h CVE-2023-26125 MODERATE published about 3 years ago • updated 4 days ago
Versions of the package github.com/gin-gonic/gin before version 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a ...
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines
GHSA-6vm3-jj99-7229 CVE-2020-36567 HIGH published over 3 years ago • updated about 2 months ago
Gin is a HTTP web framework written in Go (Golang). Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote...
Gin mishandles a wildcard at the end of an origin string
GHSA-869c-j7wc-8jqv CVE-2019-25211 CRITICAL published almost 2 years ago • updated about 4 hours ago
parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.community/...
Recent PRs
Package Details
Name: github.com/gin-gonic/gin
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/gin-gonic/gin
JSON API: View JSON
Security Advisories

5

Active advisories
CRITICAL 1
HIGH 2
MODERATE 2
View All golang Advisories
Package Information
Description:

Package gin implements a HTTP web framework called gin. See https://gin-gonic.com/ for more information about gin.

Repository: https://github.com/gin-gonic/gin
Homepage: https://github.com/gin-gonic/gin
Latest Release: v1.10.1
about 1 year ago
Dependent Repos: 55,159
Dependent Packages: 30,041
Ranking: Top 0.022% by dependent repos Top 0.0079% by dependent pkgs
PR Status
Open 788 (47.7%)
Merged 344 (20.8%)
Closed 373 (22.6%)
PR Types
Minor 920 (55.7%)
Patch 584 (35.4%)