GO-2025-3625 cnlh nps vulnerable to file overwrite by local user in github.com/cnlh/nps

cnlh nps vulnerable to file overwrite by local user in github.com/cnlh/nps...

GO-2025-3612 Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel...

GO-2025-3603 Query smuggling in ch-go library in github.com/ClickHouse/ch-go

Query smuggling in ch-go library in github.com/ClickHouse/ch-go...

GO-2025-3621 Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server

Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...

CVE-2025-27892

creationtimestamp| type| source ---|---|--- 2025-04-10 14:38:56+00:00| seen| https://bsky.app/profile/campuscodi.risky.biz/post/3lmhq7wh5zk2w 2025-04-15 22:43:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5megosj2j 2025-04-16 01:49:06+00:00| seen|...

GO-2025-3594 MinIO performs incomplete signature validation for unsigned-trailer uploads in github.com/minio/minio

MinIO performs incomplete signature validation for unsigned-trailer uploads in github.com/minio/minio...

BIT-DOLIBARR-2023-5842 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr

Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...

BIT-DOLIBARR-2022-0819 Code Injection in dolibarr/dolibarr

Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1...

BIT-DOLIBARR-2022-0731 Improper Access Control (IDOR) in dolibarr/dolibarr

Improper Access Control IDOR in GitHub repository dolibarr/dolibarr prior to 16.0...

GO-2025-3586 Rancher: Restricted Administrator can change Administrator's passwords in github.com/rancher/rancher

Rancher: Restricted Administrator can change Administrator's passwords in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

GO-2025-3582 Ollama Denial of Service (DoS) via Null Pointer Dereference in github.com/ollama/ollama

Ollama Denial of Service DoS via Null Pointer Dereference in github.com/ollama/ollama...

GO-2025-3558 Ollama Allows Out-of-Bounds Read in github.com/ollama/ollama

Ollama Allows Out-of-Bounds Read in github.com/ollama/ollama...

GO-2025-3559 Ollama Divide By Zero vulnerability in github.com/ollama/ollama

Ollama Divide By Zero vulnerability in github.com/ollama/ollama...

GO-2025-3546 PipeCD Vulnerable to Privilege Escalation in github.com/pipe-cd/pipecd

PipeCD Vulnerable to Privilege Escalation in github.com/pipe-cd/pipecd...

GO-2025-3539 OpenShift Console Has a Path Traversal Vulnerability in github.com/openshift/console

OpenShift Console Has a Path Traversal Vulnerability in github.com/openshift/console...

GO-2025-3562 Kyverno ignores subjectRegExp and IssuerRegExp in github.com/kyverno/kyverno

Kyverno ignores subjectRegExp and IssuerRegExp in github.com/kyverno/kyverno...

CVE-2025-2710

creationtimestamp| type| source ---|---|--- 2025-03-25 01:05:44+00:00| seen| https://t.me/cvedetector/21009 2025-07-16 13:27:11+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2710.yaml 2025-07-17 21:02:31+00:00| seen|...

CVE-2025-2712

creationtimestamp| type| source ---|---|--- 2025-03-24 22:23:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8566 2025-03-25 01:05:35+00:00| seen| https://t.me/cvedetector/21001 2025-07-16 13:25:39+00:00| confirmed|...

GO-2025-3527 buildx allows a possible credential leakage to telemetry endpoint in github.com/docker/buildx

buildx allows a possible credential leakage to telemetry endpoint in github.com/docker/buildx...

GO-2025-3516 Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/

Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/...