logrus-dos-poc

CVE-2025-65637: Logrus 서비스 거부 취약점 이 디렉토리는 github.com/sirupsen/logrus의 서비스 거부DoS 취약점에 대한 개념 증명 코드와 테스트 스크립트를 포함하며, CVE-2025-65637 로 할당되었습니다. 취약점 요약 CVE ID : CVE-2025-65637 CWE : CWE-400 통제되지 않은 리소스 소비 CVSS : 7.5 High 발견자 : Christopher Straight, Juan Pablo Mandelbaum 설명 Entry.Writer를 사용하여 개행 문자가 없는...

SUSE CVE-2026-27780

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: skopeo (UTSA-2026-102702)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102702 advisory. A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline...

Gitea pre-receive hook scanner errors allow branch-protection bypass

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

CVE-2026-27780: Incorrect Authorization

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

CVE-2025-65637: Uncontrolled Resource Consumption

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...