go-pkcs12

package pkcs12 import "software.sslmate.com/src/go-pkcs12" Package pkcs12 implements some of PKCS12 also known as P12 or PFX. It is intended for decoding DER-encoded P12/PFX files for use with the crypto/tls package, and for encoding P12/PFX files for use by legacy applications which do not suppo...

PoC-CVE-2019-10743

Zip Slip Demo This project demonstrates the Zip Slip vulnerability CVE-2019-10743 using the vulnerable version of the mholt/archiver package. What is Zip Slip? Zip Slip is vulnerability that was uncovered by the security researchers from Snyk. It was found that the vulnerability is impacting...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

CVE-2026-119028

A flaw was found in oapi-codegen. This vulnerability allows an attacker who controls an OpenAPI specification to achieve arbitrary code execution by supplying crafted enum entries in integer, number, or boolean schemas. When processing the untrusted specification, the generator fails to sanitize...

CLEANSTART-2026-DQ34657 go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP

CVE-2026-32952 affects multiple packages. go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. See references for individual vulnerability details...

smb

SMB A Go package for communicating over SMB. Currently only minimal funcationality exists for client-side functions. Here is a sample client that establishes a session with a server: package main import "log" "github.com/stacktitan/smb/smb" func main host := "172.16.248.192" options := smb.Option...

CLEANSTART-2024-KD93914 Rat

Security vulnerability affects the go package. Rat...

CLEANSTART-2024-DW33743 Uncontrolled recursion in Glob in path/filepath before Go 1

Security vulnerability affects the go package. Uncontrolled recursion in Glob in path/filepath before Go 1...

CLEANSTART-2024-DG40739 Uncontrolled recursion in Reader

Security vulnerability affects the go package. Uncontrolled recursion in Reader...

CLEANSTART-2024-HY52810 Uncontrolled recursion in Glob in io/fs before Go 1

Security vulnerability affects the go package. Uncontrolled recursion in Glob in io/fs before Go 1...

CLEANSTART-2024-JR32969 Uncontrolled recursion in Decoder

Security vulnerability affects the go package. Uncontrolled recursion in Decoder...

CLEANSTART-2024-II29085 too-short encoded message can cause a panic in Float

Security vulnerability affects the go package. A too-short encoded message can cause a panic in Float...

CLEANSTART-2024-DA63288 JoinPath and URL

Security vulnerability affects the go package. JoinPath and URL...

CLEANSTART-2024-IZ10657 Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service

Security vulnerability affects the go package. Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service...

CLEANSTART-2024-NJ91061 ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve)

Security vulnerability affects the go package. The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars a scalar larger than the order of the curve...

CLEANSTART-2024-TE93048 Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts

Security vulnerability affects the go package. Angle brackets are not considered dangerous characters when inserted into CSS contexts...

CLEANSTART-2024-FD27979 HTTP/1 client does not fully validate the contents of the Host header

Security vulnerability affects the go package. The HTTP/1 client does not fully validate the contents of the Host header...

CLEANSTART-2024-MX66530 Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures

Security vulnerability affects the go package. Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures...

CLEANSTART-2024-IC28886 QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth

Security vulnerability affects the go package. QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth...

CLEANSTART-2024-ZN34966 Processing an incomplete post-handshake message for a QUIC connection can cause a panic

Security vulnerability affects the go package. Processing an incomplete post-handshake message for a QUIC connection can cause a panic...