PT-2026-51632

The Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymmetric Denial of Service DoS attack. The application accepts inbound TCP connections and passes them to golang.org/x/crypto/ssh.NewServerConn inside a new goroutine without enforcing any read/write deadlines on the underlyin...

CVE-2026-7776

Boundary Boundary Community Edition and Boundary Enterprise workers are affected by a denial-of-service during TLS handshake on the worker authentication listener. An attacker who can reach that listener can delay or withhold the client certificate during the TLS handshake, causing the worker con...