github.com/zeromicro/go-zero
A cloud-native Go microservices framework with cli tool for productivity.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 57
- Cadence
- ~37 days
- Last 12 months
- 8
Reach
- Stars
- 33.2k
Details
- First release
- Aug 13, 2020
| Version | Released | |
|---|---|---|
v1.10.3
patch
|
v1.10.3
patch
Dependencies (44)
+ 36 more |
|
v1.10.2
patch
|
v1.10.2
patch
Dependencies (44)
+ 36 more |
|
v1.10.1
patch
|
v1.10.1
patch
Dependencies (44)
+ 36 more |
|
v1.10.0
minor
|
v1.10.0
minor
Dependencies (43)
+ 35 more |
|
v1.9.4
patch
|
v1.9.4
patch
Dependencies (43)
+ 35 more |
|
v1.9.3
patch
|
v1.9.3
patch
Dependencies (43)
+ 35 more |
|
v1.9.2
minor
|
v1.9.2
minor
Dependencies (43)
+ 35 more |
|
v1.9.1
patch
|
v1.9.1
patch
Dependencies (43)
+ 35 more |
|
v1.9.0
minor
|
v1.9.0
minor
Dependencies (43)
+ 35 more |
|
v1.8.5
patch
|
v1.8.5
patch
Dependencies (43)
+ 35 more |
|
v1.8.4
patch
|
v1.8.4
patch
Dependencies (43)
+ 35 more |
|
v1.8.3
patch
|
v1.8.3
patch
Dependencies (43)
+ 35 more |
|
v1.8.2
patch
|
v1.8.2
patch
Dependencies (43)
+ 35 more |
|
v1.8.1
minor
|
v1.8.1
minor
Dependencies (43)
+ 35 more |
|
v1.8.0
minor
|
v1.8.0
minor
Dependencies (43)
+ 35 more |
|
v1.7.6
patch
|
v1.7.6
patch
Dependencies (43)
+ 35 more |
|
v1.7.5
patch
|
v1.7.5
patch
Dependencies (43)
+ 35 more |
|
v1.7.4
patch
|
v1.7.4
patch
Dependencies (43)
+ 35 more |
|
v1.7.3
minor
|
v1.7.3
minor
Dependencies (43)
+ 35 more |
|
v1.7.2
minor
|
v1.7.2
minor
Dependencies (43)
+ 35 more |
|
v1.6.6
patch
|
v1.6.6
patch
Dependencies (43)
+ 35 more |
|
v1.6.3
patch
|
v1.6.3
patch
Dependencies (43)
+ 35 more |
|
v1.6.2
patch
|
v1.6.2
patch
Dependencies (43)
+ 35 more |
|
v1.6.1
minor
|
v1.6.1
minor
Dependencies (43)
+ 35 more |
|
v1.5.4
patch
|
v1.5.4
patch
Dependencies (43)
+ 35 more |
|
v1.5.3
patch
|
v1.5.3
patch
Dependencies (43)
+ 35 more |
|
v1.5.2
minor
|
v1.5.2
minor
Dependencies (43)
+ 35 more |
|
v1.4.4
patch
|
v1.4.4
patch
Dependencies (43)
+ 35 more |
|
v1.4.0
minor
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.4.0
minor
Dependencies (42)
+ 34 more |
|
v1.3.5
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.3.5
patch
Dependencies (38)
+ 30 more |
|
v1.3.2
minor
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.3.2
minor
Dependencies (35)
+ 27 more |
|
v1.2.4
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.2.4
patch
Dependencies (40)
+ 32 more |
|
v1.2.2
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.2.2
patch
Dependencies (41)
+ 33 more |
|
v1.2.1
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.2.1
patch
Dependencies (41)
+ 33 more |
|
v1.2.0
minor
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.2.0
minor
Dependencies (41)
+ 33 more |
|
v1.1.10
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.1.10
patch
Dependencies (32)
+ 24 more |
|
v1.1.9
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.1.9
patch
Dependencies (32)
+ 24 more |
|
v1.1.8
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.1.8
patch
Dependencies (33)
+ 25 more |
|
v1.1.7
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.1.7
patch
Dependencies (31)
+ 23 more |
|
v1.1.5
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.1.5
patch
Dependencies (32)
+ 24 more |
|
v1.1.4
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.1.4
patch
Dependencies (34)
+ 26 more |
|
v1.1.3-beta
pre
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.1.3-beta
pre
Dependencies (34)
+ 26 more |
|
v1.1.3-pre
pre
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.1.3-pre
pre
Dependencies (34)
+ 26 more |
|
v1.1.0
minor
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.1.0
minor
Dependencies (33)
+ 25 more |
|
v1.0.25
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.0.25
patch
Dependencies (33)
+ 25 more |
|
v1.0.24
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.0.24
patch
Dependencies (33)
+ 25 more |
|
v1.0.20
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.0.20
patch
Dependencies (32)
+ 24 more |
|
v1.0.17
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.0.17
patch
Dependencies (31)
+ 23 more |
|
v1.0.15
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.0.15
patch
Dependencies (31)
+ 23 more |
|
v1.0.14
patch
1 CVE
CVE-2024-27302
GO-2024-2604
GHSA-fgxv-gw55-r5fq
Mar 11, 2024
CORS Filter bypass in github.com/zeromicro/go-zero The CORS Filter feature in go-zero allows users to specify an array of domains allowed in the CORS policy. However, the isOriginAllowed function uses strings.HasSuffix to check the origin, which can lead to a bypass via a domain like "evil-victim.com". This vulnerability is capable of breaking CORS policy and thus allowing any page to make requests and retrieve data on behalf of other users. Fixed in
1.4.4
References Updated May 20, 2024 · Source: OSV.dev |
v1.0.14
patch
Dependencies (31)
+ 23 more |