Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownChecksum bypass for golang.org/fips140 in cmd/goEPSS 0.1%Oct 8, 2026
- UnknownLimit handshake messages we are willing to accept post-handshake in crypto/tlsEPSS 0.6%Aug 13, 2026
- UnknownAvoid quadratic complexity in resolvePath in net/urlEPSS 0.5%Aug 13, 2026
- UnknownFix Javascript regexp context tracking in html/templateEPSS 0.3%Aug 13, 2026
- UnknownEnforce maximum recursion depth in encoding/asn1EPSS 0.6%Aug 13, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchEPSS 0.2%Jul 24, 2026
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataEPSS 0.4%Jul 21, 2026
- UnknownQuadratic complexity in WordDecoder.DecodeHeader in mimeEPSS 0.6%Jun 2, 2026
- High7.7Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyvernoEPSS 0.4%Apr 14, 2026
- UnknownUnexpected paths returned from LookPath in os/execEPSS 0.5%Sep 18, 2025
- UnknownSensitive headers not cleared on cross-origin redirect in net/httpEPSS 0.7%Jun 11, 2025
- UnknownKyverno vulnerable due to usage of insecure cipherEPSS 0.1%May 30, 2023
12 records · page 1 of 1
PreviousNext