Go Advisories.

SSRF and credential leak via unvalidated Location header in github.com/mark3labs/mcp-go

* · no fixed version yet

Nil-pointer panic in validateAssertion and namespace-blind Subject.NameID in github.com/crewjam/saml

* · no fixed version yet

Panic on negative member size in Reader.Read in github.com/blakesmith/ar

* · no fixed version yet

Event type spoofing via UntrustedType in github.com/google/go-eventlog

<0.0.3-0.20261001001437-1991f15bc4b0 · fixed in 0.0.3-0.20261001001437-1991f15bc4b0

Excessive memory allocation when decompressing crafted streams in github.com/andybalholm/brotli

• Memory corruption
• CWE-252

<1.2.7 · fixed in 1.2.7

kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

• Hard-coded credentials
• CWE-346

<1.25.20 · fixed in 1.25.20

lxd allows Cross-guest volume hijack via DevLXD device patch

• Broken access control

>=0.0.0-20250721152936-fe86ceb2c3fa, <0.0.0-20260626085133-7cb96ac80a6d · fixed in 0.0.0-20260626085133-7cb96ac80a6d

Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735

• Information disclosure
• Broken access control

<0.0.0-20260610131716-5dc8f53b70a3 · fixed in 0.0.0-20260610131716-5dc8f53b70a3

praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)

• Path traversal

<0.9.1 · fixed in 0.9.1

Netfoil doesn't decrement TTL

• CWE-672

>=0.3.0, <0.6.1 · fixed in 0.6.1

Arc has unauthenticated application log disclosure via `/api/v1/logs`

• Information disclosure
• Authentication bypass

<0.0.0-20260615165136-bb7d9761ad98 · fixed in 0.0.0-20260615165136-bb7d9761ad98

Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

• CWE-409

<0.0.0-20260831164314-ba9ae72cc860 · fixed in 0.0.0-20260831164314-ba9ae72cc860

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs

• Information disclosure
• Broken access control

<0.0.0-20260904182349-be4723e33727 · fixed in 0.0.0-20260904182349-be4723e33727

Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads

• CWE-346
• CWE-942

>=2.52.1, <2.52.3 · fixed in 2.52.3

imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution

• Memory corruption

>=4.0.0, <4.0.16 · fixed in 4.0.16

imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash

• Memory corruption

>=3.3.0, <4.0.17 · fixed in 4.0.17

imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field

• Denial of service

>=3.3.0, <4.0.16 · fixed in 4.0.16

anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS

• Denial of service

<1.61.1-0.20260911233437-76452a2c8a2f · fixed in 1.61.1-0.20260911233437-76452a2c8a2f

charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users

• Race condition

>=0.6.0, <0.12.3 · fixed in 0.12.3

charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories

• Information disclosure
• Broken access control

>=0.5.0, <0.12.3 · fixed in 0.12.3

cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

• Broken access control

>=1.18.0, <1.19.6 || >=1.20.0-alpha.0, <1.20.3 · fixed in 1.19.6, 1.20.3

Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware

• Denial of service

<=0.12.15 · no fixed version yet

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

• Denial of service

<0.0.0-20260531000007-52dbd5ece63f · fixed in 0.0.0-20260531000007-52dbd5ece63f

Go JOSE: Panics in JSON parsing

• Denial of service

<=3.0.5 · no fixed version yet

Go JOSE: Panic during CBC-HMAC processing

• CWE-129

<=3.0.5 · no fixed version yet

Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers

• CWE-346

<4.16.0 · fixed in 4.16.0

Echo static file middleware route protection bypass via encoded dot-dot traversal

• Path traversal

<4.16.0 · fixed in 4.16.0

Echo has a Static Middleware Double-Unescape Path Traversal

• CWE-174

<4.15.3 · fixed in 4.15.3

Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI

• Open redirect

<4.16.0 · fixed in 4.16.0

Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto

• Open redirect

<4.15.2 · fixed in 4.15.2

Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

• Broken access control
• CWE-177

<4.16.0 · fixed in 4.16.0

Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob

• Cross-site scripting (XSS)

<4.16.0 · fixed in 4.16.0

Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration

• Authentication bypass

>=4.0.0, <=4.16.2 · no fixed version yet

Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method

• Cross-site request forgery (CSRF)

<4.16.0 · fixed in 4.16.0

Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default

• CWE-346

>=4.0.0, <=4.16.2 · no fixed version yet

Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through

• HTTP request smuggling

<2.11.5 · fixed in 2.11.5

Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net

• Cross-site scripting (XSS)

<0.62.0 · fixed in 0.62.0

Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net

• Denial of service

<0.62.0 · fixed in 0.62.0

Neko: Authorization bypass in legacy WebRTC input handling

• Broken access control

>=0.0.0-20250401220545-fe94c999c6af, <0.0.0-20260805142851-395ca1a6f62b · fixed in 0.0.0-20260805142851-395ca1a6f62b

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

• Command injection

>=0.4.0, <0.47.1 · fixed in 0.47.1

FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory

• Path traversal

<0.0.0-20260814233832-4126edeb07a0 · fixed in 0.0.0-20260814233832-4126edeb07a0

Go JOSE: DoS when parsing JWKs that contain RSA keys

• Denial of service

<=3.0.5 · no fixed version yet

CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values

• Hard-coded credentials

>=0.1.5, <=1.1.0 · no fixed version yet

compress zstd: Panic on two-block frames

• Memory corruption

<1.20.2 · fixed in 1.20.2

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

• Broken access control

<0.0.0-20260808051406-3542530c505f · fixed in 0.0.0-20260808051406-3542530c505f

Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

• CWE-625

>=2.0.0, <2.13.0 · fixed in 2.13.0

chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For

• CWE-345
• CWE-348

<5.4.0 · fixed in 5.4.0

Echo: X-Real-IP extractor trusts the header value instead of the sending peer

• CWE-348

>=5.0.0, <5.4.1 · fixed in 5.4.1

Echo: WebSocket proxy can retain connections and handlers after client disconnect

• Denial of service

>=4.15.0, <4.16.1 · fixed in 4.16.1

Echo: Decompress permits unbounded gzip expansion in v4

• Denial of service
• CWE-409

>=4.0.0, <4.16.1 · fixed in 4.16.1

Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

• HTTP request smuggling
• Broken access control

>=4.0.0, <4.16.1 · fixed in 4.16.1

Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests

• CWE-252

>=5.0.0, <5.4.1 · fixed in 5.4.1

Echo: BodyDump captures request and response bodies without size limits in v4

• Denial of service

>=4.0.0, <4.16.1 · fixed in 4.16.1

SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted plugin

• Information disclosure
• CWE-345

<0.0.0-20260808010544-26ccb40d390e · fixed in 0.0.0-20260808010544-26ccb40d390e

SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream

• Authentication bypass

<0.0.0-20260731131820-67bc300b6ea6 · fixed in 0.0.0-20260731131820-67bc300b6ea6

SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden

• Information disclosure

<0.0.0-20260731093152-c7522b8db586 · fixed in 0.0.0-20260731093152-c7522b8db586

SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readers

• Broken access control

<0.0.0-20260730150429-5b42614311b0 · fixed in 0.0.0-20260730150429-5b42614311b0

SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized

• Broken access control

<0.0.0-20260729005258-4daee87d4152 · fixed in 0.0.0-20260729005258-4daee87d4152

OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs

• Broken access control

>=1.0.0, <1.0.6 || >=1.1.0, <1.1.7 || >=1.2.0, <1.2.5 · fixed in 1.0.6, 1.1.7, 1.2.5

Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization

• Denial of service

<1.4.1 · fixed in 1.4.1