1002 matches found
GO-2026-6555 Tinyauth: User enumeration attack by timing oracle in github.com/tinyauthapp/tinyauth
Tinyauth: User enumeration attack by timing oracle in github.com/tinyauthapp/tinyauth...
GO-2026-6554 OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao
OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao...
GO-2026-6597 Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd
Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd...
GO-2026-6550 SIPGO: DoS via unvalidated Content-Length in the stream parser in github.com/emiago/sipgo
SIPGO: DoS via unvalidated Content-Length in the stream parser in github.com/emiago/sipgo...
GO-2026-6583 Klever-Go: /log controls global node logging in github.com/klever-io/klever-go
Klever-Go: /log controls global node logging in github.com/klever-io/klever-go...
GO-2026-6577 Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei...
GO-2026-6582 Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller in github.com/klever-io/klever-go
Klever-Go Account takeover: kleverUpdateAccountPermission authorizes on attacker-controlled RecipientAddr instead of the authenticated caller in github.com/klever-io/klever-go...
GO-2026-6594 Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod
Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod...
GO-2026-6560 Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter in github.com/hatchet-dev/hatchet
Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenantid filter in github.com/hatchet-dev/hatchet...
gh_release_test
GitHub.com Release Test Project This is a demo of the functionality higlighted in the following blog post: https://wwws.nightwatchcybersecurity.com/2021/04/25/supply-chain-attacks-via-github-com-releases/ Please direct any questions to [email protected]...
ROOT-APP-GOBINARY-CVE-2026-45570 CVE-2026-45570 in github.com/go-git/go-git/v5 - Patched by Root
Root has patched CVE-2026-45570 in the github.com/go-git/go-git/v5 package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-45022 CVE-2026-45022 in github.com/go-git/go-git/v5 - Patched by Root
Root has patched CVE-2026-45022 in the github.com/go-git/go-git/v5 package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-71556 CVE-2026-71556 in github.com/go-git/go-git/v5 - Patched by Root
Root has patched CVE-2026-71556 in the github.com/go-git/go-git/v5 package for Root:Go. Multiple fixed versions available...
AlmaLinux 9.2 [TuxCare] Security Update: skopeo / skopeo-tests (ALMALINUX9.2:CLSA-2025:1762421840)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762421840 advisory. - A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry access...
AlmaLinux 9.2 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1752088672)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752088672 advisory. - A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated regist...
Rocky Linux 10.0 [CIQ] Security Update: opentelemetry-collector Multiple Vulnerabilities (crlsa-2025_7479)
The Rocky Linux 10.0 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257479 advisory. go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...
Rocky Linux 9 [CIQ] Security Update: image-builder / image-builder-debuginfo / image-builder-debugsource Multiple Vulnerabilities (crlsa-2026_67138)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667138 advisory. golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-27136 golang.org/x/net/html:...
PT-2026-105575
OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao...