Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-5GJ4-9GM7-2FX2Mediumgithub.com/corazawaf/coraza/v3: Coraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspection CVE-2026-107212Highgithub.com/xuri/excelize/v2: Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days CVE-2026-107213Highgithub.com/xuri/excelize/v2: Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element CVE-2026-107214Highgithub.com/xuri/excelize/v2: Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks CVE-2026-107215Highgithub.com/xuri/excelize/v2: Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS CVE-2026-107216Highgithub.com/xuri/excelize/v2: Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow CVE-2026-61801Mediumgithub.com/moby/sys/user: github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files CVE-2026-107217Highgithub.com/xuri/excelize/v2: Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0"…CVE-2026-107218Mediumgithub.com/xuri/excelize/v2: Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics CVE-2026-107219Highgithub.com/xuri/excelize/v2: Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile CVE-2026-107220Mediumgithub.com/xuri/excelize/v2: Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref CVE-2026-107221Mediumgithub.com/xuri/excelize/v2: Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet…CVE-2026-107222Mediumgithub.com/xuri/excelize/v2: Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check CVE-2026-107223Highgithub.com/xuri/excelize/v2: Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator…CVE-2026-107224Mediumgithub.com/xuri/excelize/v2: Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader CVE-2026-107225Mediumgithub.com/xuri/excelize/v2: Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml CVE-2026-62251Highgithub.com/sipcapture/homer-app: Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query CVE-2026-62252Criticalgithub.com/sipcapture/homer-app: Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login CVE-2026-62253Criticalgithub.com/sipcapture/homer-app: Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)CVE-2026-41510Highgithub.com/corazawaf/coraza/v3: Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding CVE-2026-41508Mediumgithub.com/corazawaf/coraza/v3: Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling CVE-2026-41504Mediumgithub.com/corazawaf/coraza/v3: Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields CVE-2026-26287Highgithub.com/external-secrets/external-secrets: External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration CVE-2026-86597Mediumsnowflake-sdk: Snowflake drivers writes sensitive information to logs GHSA-4WWP-F6GW-6QM5Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo