Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/24 5:38 p.m.15 views

OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination

Summary OliveTin's template engine uses a single shared text/template.Template instance tpl package-level variable in service/internal/tpl/templates.go across all goroutines. Every action execution calls tpl.Parsesource followed by t.Execute on this shared instance with no synchronization. When t...

7.5CVSS6.1AI score0.00402EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder