Skip to content
Fencer Intel

All · go

Newest first, late arrivals on top. Also a feed.

  1. 6.5
    CVE-2026-33022 Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun
    go
  2. 4.6
    CVE-2026-32953 Tillitis: TKey Client has an Error in Protocol Implementation
    go
  3. 6.5
    CVE-2026-32941 Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports
    go
  4. 7.1
    CVE-2026-32254 Kube-router Proxy Module Blindly Trusts ExternalIPs/LoadBalancer IPs Enabling Cluster-Wide Traffic Hijacking and DNS DoS
    go
  5. 9.3
    CVE-2026-32940 SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)
    go
  6. 9.9
    CVE-2026-32938 SiYuan has an Arbitrary File Read in its Desktop Publish Service
    go
  7. 4.9
    CVE-2026-32828 Kargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration
    go
  8. 9.8
    CVE-2026-32769 Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace
    go
  9. 7.5
    CVE-2026-32805 Romeo is vulnerable to Archive Slip due to missing checks in sanitization
    go
  10. 9.8
    CVE-2026-32771 Monitoring is vulnerable to Archive Slip due to missing checks in sanitization
    go
  11. 10.0
    CVE-2026-32737 Romeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespace
    go
  12. 9.9
    CVE-2026-32768 Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace
    go
  13. 6.5
    CVE-2026-32758 File Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameter
    go
  14. 9.8
    CVE-2026-32767 SiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API
    go
  15. 9.8
    CVE-2026-32760 File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin
    go
  16. 9.6
    CVE-2026-56397 SiYuan - Remote Code Execution via Malicious Bazaar Package Metadata and README
    go
  17. 8.1
    CVE-2026-32759 File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely
    go
    EPSS 2.1% chance of exploitation in 30 days, percentile 81%
  18. 7.5
    CVE-2026-32284 Denial of service in github.com/shamaton/msgpack
    go
  19. 7.5
    CVE-2026-32285 Denial of service in github.com/buger/jsonparser
    go
  20. 7.5
    CVE-2026-32286 Denial of service in github.com/jackc/pgproto3/v2
    go
  21. 4.3
    CVE-2026-26304 Permission Bypass in Playbook Run Creation
    go
  22. 9.0
    CVE-2026-32751 SiYuan Vulnerable to Remote Code Execution via Stored XSS in Notebook Name - Mobile Interface
    go
  23. 6.8
    CVE-2026-32750 SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes
    go
  24. 7.6
    CVE-2026-32749 SiYuan importSY/importZipMd: Path Traversal via multipart filename enables arbitrary file write
    go
  25. 7.5
    CVE-2026-32815 SiYuan: Cross-Origin WebSocket Hijacking via Authentication Bypass — Unauthenticated Information Disclosure
    go
  26. 6.8
    CVE-2026-32747 SiYuan: Incomplete sensitive path blocklist in globalCopyFiles allows reading /proc and Docker secrets
    go
  27. 7.7
    CVE-2026-32606 IncusOS has a LUKS encryption bypass due to insufficient TPM policy
    go
  28. 4.3
    CVE-2026-24692 Guest users can bypass read permissions via search API
    go
  29. 3.1
    CVE-2026-22545 Password Change Bypass via Auth Switch Endpoint
    go
  30. 4.3
    CVE-2026-2455 SSRF bypass via IPv4-mapped IPv6 literals
    go