Skip to content
Fencer Intel

All · go

Newest first, late arrivals on top. Also a feed.

  1. 6.1
    GHSA-grh9-37g7-53mj WireGuard Portal v2 has Open Redirect Vulnerability in OAuth Authentication Flow
    go
  2. 7.5
    CVE-2026-25499 terraform-provider-proxmox has insecure sudo recommendation in the documentation
    go
  3. 8.1
    CVE-2026-25060 OpenList Insecure TLS Default Configuration
    go
  4. 8.8
    CVE-2026-25059 OpenList affected by Path Traversal in file copy and remove handlers
    go
  5. 7.0
    CVE-2026-24051 OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking
    go
  6. 8.3
    CVE-2025-67601 Rancher CLI skips TLS verification on Rancher CLI login command
    go
  7. 7.8
    CVE-2026-24905 Inspektor Gadget has a Command Injection vulnerability in Makefile.build
    go
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  8. 5.5
    CVE-2026-24846 malcontent's archive extraction could write outside extraction directory
    go
  9. 6.5
    CVE-2026-24845 malcontent's OCI image scanning could expose registry credentials
    go
  10. 9.1
    CVE-2026-25539 SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE
    go
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  11. 7.5
    CVE-2026-25992 SiYuan has a File Read Interface Case Bypass Vulnerability
    go
  12. 6.5
    CVE-2025-61728 Excessive CPU consumption when building archive index in archive/zip
    bitnamigo
  13. 7.5
    CVE-2025-61726 Memory exhaustion in query parameter parsing in net/url
    bitnamigo
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  14. 5.3
    CVE-2025-61730 Handshake messages may be processed at the incorrect encryption level in crypto/tls
    bitnamigo
  15. 8.6
    CVE-2025-61731 Arbitrary file write using cgo pkg-config directive in cmd/go
    bitnamigo
  16. 7.0
    CVE-2025-68119 Unexpected code execution when invoking toolchain in cmd/go
    bitnamigo
  17. 2.1
    CVE-2026-1237 Juju has broken CMR authorization
    go
  18. 7.2
    CVE-2026-24748 Kargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated access
    go
  19. 7.7
    CVE-2026-23881 Kyverno Denial of Service via Context Variable Amplification in Policy Engine
    gobitnami
  20. 10.0
    CVE-2026-22039 Kyverno Cross-Namespace Privilege Escalation via Policy apiCall
    gobitnami
  21. 6.5
    CVE-2026-24738 gmrtd ReadFile Vulnerable to Denial of Service via Excessive TLV Length Values
    go
  22. 9.9
    CVE-2026-24740 Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access
    go
  23. 4.7
    CVE-2026-24686 go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names
    go
  24. 8.1
    CVE-2026-24470 Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName
    go
  25. 6.4
    CVE-2025-14525 Kubevirt: kubevirt: vm administration denial of service via guest agent
    go
  26. —
    GHSA-c32p-wcqj-j677 CometBFT has inconsistencies between how commit signatures are verified and how block time is derived
    go
  27. 9.1
    CVE-2025-66719 Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value
    go
  28. 9.1
    CVE-2026-20912 Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure
    gobitnami
  29. 6.5
    CVE-2026-20904 Gitea: Broken access control in OpenID visibility toggle enables cross-user visibility changes
    gobitnami
  30. 9.1
    CVE-2026-20897 Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)
    gobitnami