Lucene search
+L

302 matches found

OSV
OSV
added 2026/07/27 4:28 p.m.8 views

GO-2026-6000 Improper parsing of W3C baggage headers may lead to DoS in github.com/DataDog/dd-trace-go

Improper parsing of W3C baggage headers may lead to DoS in github.com/DataDog/dd-trace-go...

7.5CVSS5.8AI score0.00441EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/24 6:35 p.m.7 views

GO-2026-5880 Hardlink path traversal during tar extraction in oras.land/oras-go

Hardlink path traversal during tar extraction in oras.land/oras-go...

7.1CVSS5.8AI score0.00345EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/22 8:36 p.m.12 views

GO-2026-6024 File Browser: Colliding username normalization gives two users the same home directory in github.com/filebrowser/filebrowser

File Browser: Colliding username normalization gives two users the same home directory in github.com/filebrowser/filebrowser...

8.1CVSS5.2AI score0.00323EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/07/21 8:24 p.m.5 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...

9.8CVSS8.5AI score0.00409EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/18 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-48978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge witho...

2.1CVSS5.5AI score0.00211EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/18 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-50151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a...

7.5CVSS5.6AI score0.00364EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/17 8:41 p.m.8 views

CVE-2026-50274

Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or...

7.5CVSS5.4AI score0.00441EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2026/07/17 8:17 p.m.19 views

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

7.1CVSS0.00345EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/17 8:17 p.m.6 views

UBUNTU-CVE-2026-50151

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the...

7.5CVSS5.9AI score0.00364EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/07/17 8:17 p.m.16 views

CVE-2026-48978

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...

2.1CVSS5.5AI score0.00211EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/17 8:17 p.m.6 views

UBUNTU-CVE-2026-50162

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, resolveWritePath in content/file/file.go uses a lexical filepath.Rel check for workingDir and does not account for symlink traversal, so when AllowPathTraversalOnWrite=false an attacker-controlled blob title through...

6.9CVSS5.8AI score0.00365EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/07/17 8:17 p.m.14 views

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

7.1CVSS5.5AI score0.00345EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/17 7:41 p.m.9 views

CVE-2026-50151

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the...

7.5CVSS5.3AI score0.00364EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/17 7:39 p.m.12 views

EUVD-2026-45262

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, resolveWritePath in content/file/file.go uses a lexical filepath.Rel check for workingDir and does not account for symlink traversal, so when AllowPathTraversalOnWrite=false an attacker-controlled blob title through...

6.9CVSS5.2AI score0.00365EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/17 7:36 p.m.23 views

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

7.1CVSS5.3AI score0.00345EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:34 p.m.15 views

CVE-2026-48978

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...

2.1CVSS5.2AI score0.00211EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/07/17 7:34 p.m.52 views

CVE-2026-48978 oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...

2.1CVSS0.00211EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/17 7:34 p.m.18 views

EUVD-2026-45295

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...

2.1CVSS5.2AI score0.00211EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/17 7:34 p.m.8 views

CVE-2026-48978 oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...

2.1CVSS5.2AI score0.00211EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/17 7:20 p.m.19 views

CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

7.5CVSS5.3AI score0.00113EPSS
SaveExploits0
Rows per page
Query Builder