Vulnerabilities > Digitalocean > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-12-27 CVE-2020-36569 Improper Authentication vulnerability in Digitalocean Golang-Nanoauth
Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token.
network
low complexity
digitalocean CWE-287
critical
9.1