A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length i…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.22EPSS 0.34%via CSAF

CVE-2026-47703Medium

5mo ago

AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

▾ SunlitAdguardTeam · github.com/AdguardTeam/AdGuardHomeEPSS 0.14%via OSV

CVE-2026-10814Medium· 4.5

5mo ago

milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery

▾ Sunlitmilvus-io · github.com/milvus-io/milvusEPSS 0.09%via OSV

CVE-2026-40898High· 7.5⚖ disputed

5mo ago

github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers (CVE-2026-40898)

A flaw was found in quic-go, an implementation of the QUIC protocol in Go. A remote attacker can exploit this by sending specially crafted HTTP/3 trailer fields. This can cause the system to allocate excessive memory, leading to a denial-o…

▾ TwilightRed Hat · Red Hat Ansible Automation Platform 2.6 for RHEL 9EPSS 0.40%via CSAF

CVE-2026-10722Medium· 5.5⚖ disputed

5mo ago

github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow (CVE-2026-10722)

A flaw was found in the cilium/ebpf Go library (versions up to 0.21.0). An integer overflow in the loadRawSpec function (btf/btf.go) when parsing BTF collection specs can cause excessive memory allocation or parsing failure. A local attack…

▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.18%via CSAF

CVE-2026-37462High· 7.3

5mo ago

GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function

▾ Twilightosrg · github.com/osrg/gobgp/v4EPSS 0.28%via OSV

CVE-2026-42507Medium· 5.3

5mo ago

Arbitrary inputs are included in errors without any escaping in net/textproto

▾ Sunlitstdlib · stdlibEPSS 0.37%via OSV

CVE-2026-42504High· 7.5

5mo ago

Quadratic complexity in WordDecoder.DecodeHeader in mime

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

▾ TwilightGo standard library · mimeEPSS 0.56%via CVEORG

CVE-2026-27145Medium· 6.5PoC

5mo ago

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SA…

▾ TwilightGo standard library · crypto/x509EPSS 0.59%via NVD

Tagged “go”

Nezha has cross-site GET request that can trigger stored cron commands on a victim's agents

Nezha's private services (`EnableShowInService: false`) are enumerable via per-server endpoints, leaking name and timing data

nebula-mesh: Decrypted CA private key persists in heap after signing

nebula-mesh: Session and OIDC state cookies lack the Secure attribute

nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)

Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability

Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability

Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Apache Answer vulnerable to Cross-site Scripting

Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability

Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability

Dex: Token-exchange endpoint is missing AllowedConnectors enforcement

grepai Uses a Broken or Risky Cryptographic Algorithm

Weaviate has an Improper Authorization issue

songquanpeng one-api has an issue that results in business logic errors

grepai Uses a Broken or Risky Cryptographic Algorithm

nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml

nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)

nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation

nebula-mesh's web UI lacks CSRF tokens on /ui/* mutating endpoints

nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator

github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denia…

AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery

github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers (CVE-2026-40898)

github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow (CVE-2026-10722)

GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function

Arbitrary inputs are included in errors without any escaping in net/textproto

Quadratic complexity in WordDecoder.DecodeHeader in mime

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries