golang.org/x/crypto/ssh/agent: Invoking pathological inputs can lead to client panic

CVE-2026-46598

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when

历史摘要 · 未重新核验 · GitHub Advisory

Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic

CVE-2026-48702

## Description The `Package.Unmarshal()` function in `pkg/types/alpine/apk.go` decompresses the signature and control g

历史摘要 · 未重新核验 · GitHub Advisory

GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion

CVE-2026-48529

### Summary When running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-glo

历史摘要 · 未重新核验 · GitHub Advisory

Beyond Takedown: Measuring Malicious Go Module Persistence in the Wild

本文研究Go生态系统中的自动化供应链攻击活动。攻击者将合法Go模块重新打包到其控制的所有者名下，并在其中嵌入混淆代码，作为导入触发的下载器。作者通过两项互补分析进行测量：a) 在GitHub上手动搜索2,113个仓库；b) 使用自行实现的去

历史摘要 · 未重新核验 · arXiv cs.CR

OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

CVE-2026-53541

### Description The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not ex

历史摘要 · 未重新核验 · GitHub Advisory

OliveTin: ValidateArgumentType API Endpoint's Missing Authentication Allows Action and Argument Enumeration

CVE-2026-48709

## Summary The `ValidateArgumentType` RPC endpoint in `service/internal/api/api.go` does not perform any authentication

历史摘要 · 未重新核验 · GitHub Advisory

OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination

CVE-2026-48708

## Summary OliveTin's template engine uses a **single shared `text/template.Template` instance** (`tpl` package-level v

历史摘要 · 未重新核验 · GitHub Advisory

OpenTofu: Provider cache installation follows root-module-controlled package directory symlink and writes outside the working tree

## Summary If a symlink already exists under the `.terraform/providers` directory where a provider package needs to be

历史摘要 · 未重新核验 · GitHub Advisory

opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent

CVE-2026-48496

### Summary An unprivileged process can easily trigger the `processPIDEvents` goroutine to be blocked indefinitely, pre

历史摘要 · 未重新核验 · GitHub Advisory

Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir

CVE-2026-48126

### Summary When algernon is started with `--domain` (or `--letsencrypt`, which silently turns on `--domain` at `engine

历史摘要 · 未重新核验 · GitHub Advisory

Gogs has the ability to import local repositories via Mirror Settings

CVE-2026-52801

### Summary The Gogs Mirror Settings functionality provide an alternative way from the well protected New Migration func

历史摘要 · 未重新核验 · GitHub Advisory

Gogs Vulnerable to CSRF Leading to Organization Owner Takeover

CVE-2026-52800

## Summary In **Gogs 0.14.1**, organization team member management can be performed via **GET requests without CSRF pro

历史摘要 · 未重新核验 · GitHub Advisory

Gogs Missing Authorization in Attachment Download

CVE-2026-52799

## Summary In Gogs 0.14.1, `GET /attachments/:uuid` returns the raw attachment file **without verifying whether the req

历史摘要 · 未重新核验 · GitHub Advisory

Gogs has Stored XSS in `.ipynb` Preview

CVE-2026-52798

# Summary Although `.ipynb` previews are sanitized on the server side via `/-/api/sanitize_ipynb`, the inserted content

历史摘要 · 未重新核验 · GitHub Advisory

Gogs has DoS in rendering issue index pattern

CVE-2026-52796

### Summary Special template of issue index pattern may cause panic. ### Details in internal/markup/markup.go ```go l

历史摘要 · 未重新核验 · GitHub Advisory

nebula-mesh's stores enrollment tokens unhashed in SQLite

`internal/store/sqlite.go:1177,1192,1221,1245` — the `enrollment_tokens.token` column holds the raw UUID token. `Consume

历史摘要 · 未重新核验 · GitHub Advisory

Gogs has SSRF in webhook deliveries

CVE-2026-47267

### Summary The fix for CVE-2022-1285 prevents adding webooks or running webhooks with URLs with a hostname that resolv

历史摘要 · 未重新核验 · GitHub Advisory

Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF (no shipped gadget affected)

CVE-2026-44778

## Summary A malicious container can crash or destabilize the privileged Inspektor Gadget process when a **gadget using

历史摘要 · 未重新核验 · GitHub Advisory

Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

CVE-2026-44517

### Impact When processing a build contexts or `add`/`copy` instructions, a malicious server serving a Git repository o

历史摘要 · 未重新核验 · GitHub Advisory

runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

CVE-2026-41579

### Impact When setting up the container rootfs, `setupPtmx` and `setupDevSymlinks` call `os.Remove` and `os.Symlink` wi

历史摘要 · 未重新核验 · GitHub Advisory