Skip to content
Fencer Intel

All · go

Newest first, late arrivals on top. Also a feed.

  1. 9.4
    CVE-2026-24834 Kata Container to Guest micro VM privilege escalation
    go
  2. 9.9
    CVE-2026-27112 Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints
    go
  3. 5.0
    CVE-2026-27111 Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints
    go
  4. 7.5
    CVE-2026-26315 Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake
    go
  5. 7.5
    CVE-2026-26314 Go Ethereum affected by DoS via malicious p2p message
    go
  6. 7.5
    CVE-2026-26313 Go Ethereum affected by DoS via malicious p2p message
    go
  7. —
    GHSA-rrxv-pmq9-x67r uTLS has a fingerprint vulnerability from missing padding extension for Chrome 120
    go
  8. 5.3
    CVE-2026-27017 uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch
    go
  9. 7.1
    CVE-2026-26205 opa-envoy-plugin has an Authorization Bypass via Double-Slash Path Misinterpretation in `input.parsed_path`
    go
  10. —
    GHSA-wgm6-9rvv-3438 Withdrawn Advisory: Libredesk has a SSRF Vulnerability in Webhooks
    go
  11. 1.7
    CVE-2026-26958 filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity
    go
  12. 7.5
    CVE-2026-26201 emp3r0r Affected by Concurrent Map Access DoS (panic/crash)
    go
  13. 5.3
    CVE-2026-25766 Echo has a Windows path traversal via backslash in middleware.Static default filesystem
    go
  14. 9.8
    CVE-2026-25242 Gogs allows unauthenticated file uploads
    go
  15. 8.8
    CVE-2026-25232 Gogs has a Protected Branch Deletion Bypass in Web Interface
    go
  16. 6.5
    CVE-2026-25229 Gogs Authorization Bypass Allows Cross-Repository Label Modification
    go
  17. 2.7
    CVE-2026-25120 Gogs Allows Cross-Repository Comment Deletion via DeleteComment
    go
  18. —
    GHSA-hr7j-63v7-vj7g Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change
    packagistgo
  19. 3.8
    CVE-2025-14573 Team Admin Bypass of Invite Permissions via allow_open_invite Field
    go
  20. 4.3
    CVE-2025-14350 Information disclosure via channel mentions in posts
    go
  21. 5.7
    CVE-2025-13821 User profile update exposes password hash and MFA secrets
    go
  22. 4.3
    CVE-2026-0997 Mattermost Zoom Plugin channel preference API lacks authorization checks
    go
  23. 4.3
    CVE-2026-0998 Mattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls
    go
  24. 5.4
    CVE-2026-0999 Authentication bypass via userID login when email and username login are disabled
    go
  25. 8.1
    CVE-2026-26187 lakeFS vulnerable to path traversal in local block adapter allow cross-namespace and sibling directory access
    go
  26. 3.1
    CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API
    go
  27. 4.3
    CVE-2026-22892 Insufficient Authorization in Mattermost Jira Plugin Allows Unauthorized Access to Post Attachments
    go
  28. 3.8
    CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments
    go
  29. 8.8
    CVE-2026-26056 Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC
    go
  30. 7.5
    CVE-2026-26055 Unauthenticated Admission Webhook Endpoints in Yoke ATC
    go