1002 matches found
GO-2026-6195 Authorization bypass in serve restic in github.com/rclone/rclone
Authorization bypass in serve restic in github.com/rclone/rclone...
GO-2026-6249 Apache Answer: AdminToken not invalidated after admin deactivation in github.com/apache/answer
Apache Answer: AdminToken not invalidated after admin deactivation in github.com/apache/answer. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerabilit...
GO-2026-6151 Apache Answer vulnerable to Cross-site Scripting in github.com/apache/answer
Apache Answer vulnerable to Cross-site Scripting in github.com/apache/answer...
PT-2026-80403
sigstore-go fails to check signature timestamps against a signing key's validity period in github.com/sigstore/sigstore-go...
PT-2026-80342
Authentication bypass via default NoopAuthenticationFunc in github.com/getkin/kin-openapi...
PT-2026-80459
New API: Integer overflow in quota billing yields negative charges self-crediting in github.com/QuantumNous/new-api...
PT-2026-80454
LDAP injection via unescaped username in github.com/hyperledger/fabric-ca...
PT-2026-80373
grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai...
PT-2026-80384
Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate...
PT-2026-80358
Nil-pointer panic on content parameter without schema in github.com/getkin/kin-openapi...
PT-2026-80345
webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go...
PT-2026-80341
JSON private fields exposed via NativeTypes and ParseStructTag in github.com/google/cel-go...
PT-2026-80386
Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator...
PT-2026-80370
grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai...
PT-2026-80366
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded 4 GiB allocation unauthenticated remote DoS in github.com/gopacket/gopacket...
PT-2026-80456
Integer overflow in BTF parsing in github.com/cilium/ebpf...
PT-2026-80419
Path traversal via local backend encoding in github.com/rclone/rclone...
PT-2026-80441
Path traversal via crafted reference names in github.com/go-git/go-git...