PT-2026-21803

Name of the Vulnerable Software and Affected Versions Fiber versions prior to 3.1.0 Description The use of the fiber flash cookie can lead to an unbounded allocation on any server. A specially crafted 10-character cookie value triggers an attempt to allocate up to 85GB of memory through unvalidat...

EUVD-2021-1002

Malware in sbrugna...

EUVD-2023-2708

Malicious code in bioql PyPI...

SUSE CVE-2025-48075

Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, fiber.Ctx.BodyParser can map flat data to nested slices using keyidxvalue syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot process t...

net/http: Denial of service due to improper 100-continue handling in net/http

A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service...

gf_cms 信任管理问题漏洞

gfcms is a GoFrameV2 based web content management system by demozx individual developer. A trust management issue vulnerability exists in gfcms version 1.0 and 1.0.1, which stems from an issue with the use of hard-coded credentials in the internal/logic/auth/auth.go page of the JWT Authentication...

Beego 路径遍历漏洞

Beego is an open source web framework based on the Go language. A security vulnerability exists in Beego v2.0.3 and earlier versions, which stems from the use of path.join by the leafInfo.match function to handle wildcardValues, which may lead to cross-directory risks...

Beego 后置链接漏洞

Beego is an open source web framework based on the Go language. A security vulnerability in the file profile.go for the function MemProf in Beego 2.0.2 allows attackers to locally launch a symbolic link attack...

Jaeles v0.4 - The Swiss Army Knife For Automated Web Application Testing

Jaeles is a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner. Installation Download precompiled version here. If you have a Go environment, make sure you have Go = 1.13 with Go Modules enable and run the following command. GO111MODULE=...