Go vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-3CM4-CCVW-6XR6Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and…CVE-2026-73802Criticalgitea.com/gitea/runner: gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabledGHSA-X8GV-G2G3-65FJHighgithub.com/siyuan-note/siyuan/kernel: SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)GHSA-P23F-CM6Q-2QP8Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)CVE-2026-74904Highgithub.com/siyuan-note/siyuan/kernel: SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode…CVE-2026-74802Lowgithub.com/siyuan-note/siyuan/kernel: SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true`…GHSA-5WF9-H793-W73CHighgithub.com/xtls/xray-core: Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacksCVE-2026-62314Mediumgithub.com/TecharoHQ/anubis: Anubis: Policy bypass via client controlled X-Original-URI headerCVE-2026-73606Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents…GHSA-9CQF-HHRQ-7V45Highgithub.com/siyuan-note/siyuan/kernel: SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class…CVE-2026-73609Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filteringCVE-2026-73605Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over…CVE-2026-73607Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no…CVE-2026-72788Mediumgithub.com/siyuan-note/siyuan/kernel: SiYuan discloses an administrator's open documents and search terms to anonymous readersCVE-2026-69085Criticalgithub.com/siyuan-note/siyuan/kernel: SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stackingCVE-2026-81872Mediumgo.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is fullCVE-2026-81869Mediumgo.opentelemetry.io/otel/sdk: OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncationCVE-2026-53493Mediumgithub.com/containerd/containerd/v2: Containerd has image-pull DoS via crafted OCI index graph amplificationCVE-2026-57231Highgithub.com/containers/podman/v5: Podman: Malformed Image can trick podman run into leaking host environment variables into the containerCVE-2026-56742Mediumgithub.com/cilium/cilium: Cilium: Namespaced HTTPRoutes can redirect traffic to other namespacesCVE-2026-61604Criticalgithub.com/ixofoundation/ixo-blockchain/v8: ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypassCVE-2026-85056Highgithub.com/zitadel/zitadel: ZITADEL: MFA bypass via session reuse in Login V2CVE-2026-85057Highgithub.com/zitadel/zitadel: ZITADEL: Actions V1 sandbox escape: host file read via require()CVE-2026-62286Mediumgithub.com/amir20/dozzle: Dozzle label filters do not restrict container event and statistics streamsCVE-2026-19730Mediumgithub.com/containers/podman/v5: podman quadlet install --replace does not fully replace the old file

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo