Skip to content
Fencer Intel

All · go

Newest first, late arrivals on top. Also a feed.

  1. 6.5
    CVE-2025-55070 Lack of MFA enforcement in WebSocket connections
    go
  2. 3.1
    CVE-2025-41436 Unauthorized access to archived channel content via threads interface
    go
  3. 4.3
    CVE-2025-11776 Guest user can discover archived public channels
    go
  4. —
    GHSA-3g2j-vm47-x4mj LXD vulnerable to a local privilege escalation through custom storage volumes
    go
  5. 9.1
    GHSA-6jqf-mv7m-3q7p File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency
    go
  6. 8.0
    GHSA-7wq2-32h4-9hc9 AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance
    go
  7. 7.5
    CVE-2025-47913 Potential denial of service in golang.org/x/crypto/ssh/agent
    go
  8. 3.1
    CVE-2025-11777 Cross-team channel membership access
    go
  9. 9.8
    CVE-2025-64717 ZITADEL vulnerable to Account Takeover with deactivated Instance IdP
    go
  10. 8.8
    CVE-2025-64523 FileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function
    go
  11. 8.7
    CVE-2025-64186 Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves
    go
  12. 8.8
    CVE-2025-2843 Observability-operator: observability operator privilege escalation
    go
  13. 7.5
    CVE-2025-63811 jose2go is vulnerable to a JWT bomb attack through its decode function
    go
  14. 6.5
    CVE-2025-64529 SpiceDB's WriteRelationships fails silently if payload is too big
    go
  15. 9.3
    CVE-2025-64513 Milvus Proxy has Critical Authentication Bypass Vulnerability
    gobitnami
  16. 7.8
    CVE-2025-64507 Incus vulnerable to local privilege escalation through custom storage volumes
    go
  17. 9.1
    CVE-2025-64522 Soft Serve is vulnerable to SSRF through its Webhooks
    go
  18. 8.5
    CVE-2025-64484 OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation
    gobitnami
  19. 7.7
    CVE-2025-64324 KubeVirt Vulnerable to Arbitrary Host File Read and Write
    go
  20. 4.6
    CVE-2025-64494 Soft Serve does not sanitize ANSI escape sequences in user input
    go
  21. 5.0
    CVE-2025-64437 KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
    go
  22. 5.3
    CVE-2025-64436 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
    go
  23. 5.3
    CVE-2025-64435 KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
    go
  24. 4.7
    CVE-2025-64434 KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing
    go
  25. 6.5
    CVE-2025-64433 KubeVirt Arbitrary Container File Read
    go
  26. 4.7
    CVE-2025-64432 KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
    go
  27. 5.5
    CVE-2025-64329 containerd CRI server: Host memory exhaustion through Attach goroutine leak
    go
  28. 3.1
    GHSA-w2jf-268q-mrvh OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses
    go
  29. 7.3
    CVE-2024-25621 containerd affected by a local privilege escalation via wide permissions on CRI directory
    go
  30. 8.7
    CVE-2025-64431 IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering
    go