Skip to content
Fencer Intel

All · go

Newest first, late arrivals on top. Also a feed.

  1. 8.2
    CVE-2026-54693 ZITADEL Users Can Self-Verify Email/Phone via API
    go
  2. 10.0
    CVE-2026-54735 prebid-server's request forgery vulnerability allows for possible host environment data extraction
    go
  3. 8.6
    CVE-2026-54650 openhole-server vulnerable to path traversal via URL-decoded request path
    go
  4. 7.5
    CVE-2026-54638 td has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode
    go
  5. 5.3
    CVE-2026-66064 goshs has ACL Bypass & Path Traversal
    go
  6. 6.5
    CVE-2026-66063 goshs has a Path Traversal issue
    go
  7. 9.1
    CVE-2026-64863 goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite
    go
  8. 7.5
    CVE-2026-54719 goshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of CVE-2026-40189)
    go
  9. 9.1
    CVE-2026-62325 goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)
    go
  10. 6.1
    CVE-2026-49446 Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server
    go
  11. 5.3
    CVE-2026-49447 Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens
    go
  12. 7.5
    CVE-2026-54332 GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
    go
  13. 7.5
    CVE-2026-54345 GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)
    go
  14. 8.1
    CVE-2026-54593 Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions
    packagistgo
  15. 7.5
    CVE-2026-47427 GitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler
    go
  16. —
    GHSA-hp74-gm6m-2qm5 Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method
    go
  17. —
    GO-2026-5781 Uncatchable stack-overflow denial of service in rsc.io/pdf
    go
  18. —
    GO-2026-5051 Out-of-bounds read and panic in ReadDir in github.com/cloudsoda/go-smb2 and github.com/hirochachacha/go-smb2
    go
  19. 7.5
    CVE-2026-63209 Integer Overflow or Wraparound and Out-of-bounds Write in compress
    go
  20. 8.7
    CVE-2026-66394 SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass
    go
  21. 7.5
    CVE-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit
    pypigopackagistmavenbitnami
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  22. 8.7
    CVE-2026-73500 etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
    gobitnami
  23. 5.3
    CVE-2026-73502 kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema
    go
  24. 7.1
    CVE-2026-73499 etcd: Watch API authorization bypass via open-ended range requests
    gobitnami
  25. 7.8
    CVE-2026-73505 Oh My Posh: Arbitrary command execution via template injection in the path segment
    go
  26. 6.1
    CVE-2026-73506 Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data
    go
  27. 6.5
    CVE-2026-69160 OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API
    go
  28. 4.3
    CVE-2026-102663 OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search
    go
  29. 7.6
    CVE-2026-73509 OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal
    go
  30. 5.4
    CVE-2026-101048 Cloudreve before 4.17.0 SSRF via Admin.Read OAuth scope
    go