Beego vulnerabilities
We track 3 vulnerabilities in Beego products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2025.
Latest Beego vulnerabilities
- 9.6 Critical severity
beego: Improper Neutralization of Input During Web Page Generation
Beego is an open-source web framework for the Go programming language. Prior to 2.3.6, a Cross-Site Scripting (XSS) vulnerability exists in Beego's RenderForm() function due to improper HTML escaping of user-controlled data. This vulnerability allows attackers
- 7.5 High severity
beego: Use of a Broken or Risky Cryptographic Algorithm
beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.
- 8.8 High severity
beego: Improper Certificate Validation
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file