21063 matches found
EUVD-2026-89991
bbs-go through 4.4.6 contains a permission bypass vulnerability in the AdminMiddleware authorization logic where the read-only dashboard.user.view permission rule matches the /api/admin/user/synccount endpoint before the intended dashboard.user.update rule. Authenticated users with only view...
CVE-2026-103396 bbs-go through 4.4.6 Incorrect Authorization via /api/admin/user/synccount
bbs-go through 4.4.6 contains a permission bypass vulnerability in the AdminMiddleware authorization logic where the read-only dashboard.user.view permission rule matches the /api/admin/user/synccount endpoint before the intended dashboard.user.update rule. Authenticated users with only view...
CVE-2026-94678
Contributor PHP Object Injection in Go Live Update Urls = 7.0.8 versions...
EUVD-2026-89850
Contributor PHP Object Injection in Go Live Update Urls = 7.0.8 versions...
CVE-2026-94678 WordPress Go Live Update Urls plugin <= 7.0.8 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Go Live Update Urls = 7.0.8 versions...
CVE-2026-94678
The Go Live Update Urls WordPress plugin versions
CVE-2026-94678 WordPress Go Live Update Urls plugin <= 7.0.8 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Go Live Update Urls = 7.0.8 versions...
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests
A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...
ROOT-APP-GOBINARY-CVE-2026-32285 CVE-2026-32285 in github.com/buger/jsonparser - Patched by Root
Root has patched CVE-2026-32285 in the github.com/buger/jsonparser package for Root:Go. Multiple fixed versions available...
CLEANSTART-2026-XQ85400 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84445 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-ZE06453 OpenTelemetry-Go is the Go implementation of OpenTelemetry
CVE-2026-81871 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-YB58885 OpenTelemetry-Go is the Go implementation of OpenTelemetry
CVE-2026-81870 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-HJ64426 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the tempo package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-AP36720 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings
Security vulnerability affects the tempo package. Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings...
CLEANSTART-2026-BY71452 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the tempo package. gRPC-Go is the Go language implementation of gRPC...
SUSE SLES15 Security Update : terraform-provider-susepubliccloud (SUSE-SU-2026:4389-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4389-1 advisory. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via...
AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785833533)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785833533 advisory. - An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For...
AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2026:1772123920)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1772123920 advisory. - During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake...
