Known vulnerabilities in Beego

Software: Beego
Software CPE: cpe:2.3:a:beego_framework:beego:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Beego Beego is affected by 9 known vulnerabilities: 2 high, 4 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110091 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-55885
CWE-327 Medium
No
No
2.3.4 03.06.2025 SB2025060315
SB2025060320
SB2025070167
#VU106348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30223
CWE-79 Low
Available
No
2.3.6 01.04.2025 SB2025040123
SB2025061855
SB2025070167
#VU85168 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31836
CWE-22 High
No
No
1.12.11, 2.0.4 09.01.2024 SB2024010917
SB2024051305
SB2022070545
#VU64698 - Incorrect Authorization
CVE-2022-24450
CWE-863 Medium
No
No
2.0.7 27.06.2022 SB2022062914
SB2022062928
SB2022071342
and 4 more
#VU63576 - Improper Access Control
CVE-2022-31259
CWE-284 Medium
No
No
2.0.3 24.05.2022 SB2022052408
SB2024051305
SB2024082751
#VU63171 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-27117
CWE-59 Low
No
No
- 13.05.2022 SB2022040536
SB2022051320
SB2023091219
#VU63170 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-27116
CWE-59 Low
No
No
- 13.05.2022 SB2022040536
SB2022051320
SB2023091219
#VU63169 - Improper Access Control
CVE-2021-30080
CWE-284 High
No
No
2.0.2 13.05.2022 SB2022040535
SB2022051320
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
2.0.3 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more