Skip to content
Fencer Intel

All · go

Newest first, late arrivals on top. Also a feed.

  1. 5.1
    CVE-2026-77339 Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools
    go
  2. 8.8
    CVE-2026-58197 ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement
    go
  3. 6.8
    CVE-2026-61795 Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation
    go
  4. 7.1
    CVE-2026-61672 Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement
    go
  5. 6.8
    CVE-2026-61794 Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic
    go
  6. 7.1
    CVE-2026-81505 Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials
    go
  7. 9.9
    CVE-2026-61682 kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
    go
  8. 6.5
    CVE-2026-77281 Caddy: rewrite placeholder re-expansion
    go
  9. 6.3
    CVE-2026-81871 OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning
    go
  10. 6.3
    CVE-2026-81872 OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
    go
  11. 5.1
    CVE-2026-81869 OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation
    go
  12. 2.0
    CVE-2026-81870 OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
    go
  13. 7.5
    CVE-2026-86043 Skipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)
    go
  14. 7.5
    CVE-2026-86003 CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP
    go
  15. 7.5
    CVE-2026-82399 CoreDNS: Unauthenticated memory exhaustion in custom transports
    go
  16. 8.8
    CVE-2026-85731 oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)
    go
  17. 4.7
    CVE-2026-85732 oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing
    go
  18. 8.7
    CVE-2026-82410 Pocketbase: Unhandled panic in worker goroutines
    go
  19. 9.5
    CVE-2026-77411 RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr
    go
  20. 8.9
    CVE-2026-77412 RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client
    go
  21. 9.4
    CVE-2026-77405 RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser
    go
  22. 8.7
    CVE-2026-77404 RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection
    go
  23. 8.9
    CVE-2026-77410 RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation
    go
  24. 8.2
    CVE-2026-77406 RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration
    go
  25. 8.9
    CVE-2026-77403 RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation
    go
  26. 7.0
    CVE-2026-77407 RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields
    go
  27. 9.1
    CVE-2026-77408 RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow
    go
  28. 5.3
    CVE-2026-61709 OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user
    go
  29. 7.5
    CVE-2026-61554 emp3r0r has an unauthenticated HTTP Polling DoS
    go
  30. 9.8
    CVE-2026-101090 Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri
    go