Go Advisories.

Nuclei: Local File Read via MySQL Client Sandbox Bypass

• Broken access control

>=3.0.0, <3.10.0 · fixed in 3.10.0

Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

• Command injection

>=3.0.0, <3.10.0 · fixed in 3.10.0

Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

• Code injection
• Memory corruption

>=3.0.0, <3.10.0 · fixed in 3.10.0

Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service

• Authentication bypass

<1.0.1-0.20260715123057-dade1e2c8f27 · fixed in 1.0.1-0.20260715123057-dade1e2c8f27

Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for

• Broken access control
• CWE-178

<1.0.1-0.20260720133915-80bc87188ec3 · fixed in 1.0.1-0.20260720133915-80bc87188ec3

Tinyauth: User enumeration attack by timing oracle

• CWE-208

<1.0.1-0.20260714134959-c22925c2fba9 · fixed in 1.0.1-0.20260714134959-c22925c2fba9

KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API

• Command injection

>=1.12.0, <1.21.2 || >=1.22.0, <1.22.2 || >=1.23.0, <1.23.1 · fixed in 1.21.2, 1.22.2, 1.23.1

KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub

• Denial of service

>=1.0.0, <1.21.2 || >=1.22.0, <1.22.2 || >=1.23.0, <1.23.1 · fixed in 1.21.2, 1.22.2, 1.23.1

KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join

• Path traversal

>=1.16.0, <1.21.2 || >=1.22.0, <1.22.2 || >=1.23.0, <1.23.1 · fixed in 1.21.2, 1.22.2, 1.23.1

OpenBao Skips Stricter Deny Policy for LIST operations

• Broken access control

<0.0.0-20260713133043-f58d848c139e || >=0.1.0, <=1.1.5 · fixed in 0.0.0-20260713133043-f58d848c139e

OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack

• CWE-208

<0.0.0-20260713141742-763625a20721 || >=0.1.0, <=1.1.5 · fixed in 0.0.0-20260713141742-763625a20721

OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters

• Broken access control

<0.0.0-20260710001938-2d4ebafec5c5 || >=0.1.0, <=1.1.5 · fixed in 0.0.0-20260710001938-2d4ebafec5c5

OpenBao Agent Writes Secrets to Stdout

• Information disclosure

<0.0.0-20260714163218-90272575e5f5 || >=0.1.0, <=1.1.5 · fixed in 0.0.0-20260714163218-90272575e5f5

KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes

• Command injection

>=1.21.0, <1.21.2 || >=1.22.0, <1.22.2 || >=1.23.0, <1.23.1 · fixed in 1.21.2, 1.22.2, 1.23.1

SIPGO: DoS via unvalidated WebSocket frame length

• Denial of service

<1.4.3 · fixed in 1.4.3

Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

• Authentication bypass
• CWE-348

>=1.6.6, <1.7.2 · fixed in 1.7.2

Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check

• Broken access control

<0.91.1 · fixed in 0.91.1

Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler

• Server-side request forgery (SSRF)

<0.91.1 · fixed in 0.91.1

SIPGO: DoS via unvalidated Content-Length in the stream parser

• Denial of service

<1.4.1 · fixed in 1.4.1

Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`

• CWE-129

>=3.0.0, <3.11.2 · fixed in 3.11.2

Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS

• Denial of service

>=3.0.0, <3.11.1 · fixed in 3.11.1

nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition

• Race condition

<0.0.0-20260621194639-0586b4e55ab · fixed in 0.0.0-20260621194639-0586b4e55ab

nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware

• Denial of service

>=0.0.0-20260126024607-cbaf0fc16ed8, <0.0.0-20260526022344-0c988fc1277c · fixed in 0.0.0-20260526022344-0c988fc1277c

nginx ignition has TOTP Reuse During Validity Window

• Authentication bypass

>=0.0.0-20260217145239-1cbfae0296f1, <0.0.0-20260328015550-8d35e1eb5dd6 · fixed in 0.0.0-20260328015550-8d35e1eb5dd6

k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers

• CWE-693

<0.18.0 · fixed in 0.18.0

Hatchet - Unauthenticated OAuth state CSRF / login-CSRF via empty-state collision in ValidateOAuthState

• Authentication bypass
• Cross-site request forgery (CSRF)

<0.91.1 · fixed in 0.91.1

Obot: Server-Side Request Forgery via remote MCP server URL

• Server-side request forgery (SSRF)
• CWE-1188

<0.23.0 · fixed in 0.23.0

Obot: MCP Registry API readable without authentication

• Broken access control

<0.23.0 · fixed in 0.23.0

Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion

• Broken access control

<0.23.0 · fixed in 0.23.0

Perses's unvalidated project parameter enables filesystem path traversal

• Path traversal

<0.54.0-rc.0 · fixed in 0.54.0-rc.0

Perses's missing authorization in datasource proxy allows cross-scope secret disclosure

• Broken access control

>=0.43.0, <0.54.0-rc.0 · fixed in 0.54.0-rc.0

Perses's project query parameter authorization bypass exposes cross-project resources

• Broken access control

<0.54.0-beta.3 · fixed in 0.54.0-beta.3

Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools

• Authentication bypass
• CWE-346

<1.120.0 · fixed in 1.120.0

Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials

• Broken access control

<0.9.3-0.20260724092134-1cc67cd16fb1 · fixed in 0.9.3-0.20260724092134-1cc67cd16fb1

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

• Information disclosure
• Hard-coded credentials

<1.6.15 · fixed in 1.6.15

AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body

• CWE-345

<1.6.15 · fixed in 1.6.15

ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement

• Broken access control
• Authentication bypass

<0.30.1 · fixed in 0.30.1

kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

• Authentication bypass
• CWE-302

<0.31.4 || >=0.32.0, <0.32.2 · fixed in 0.31.4, 0.32.2

zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion

• Broken access control

<2.1.18 · fixed in 2.1.18

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

• CWE-697

>=0.13.0, <0.13.7 · fixed in 0.13.7

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

• Broken access control
• CWE-697

<0.13.7 · fixed in 0.13.7

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic

• CWE-20

>=0.13.0, <0.13.7 · fixed in 0.13.7

Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass

• Code injection
• Denial of service

<2.11.4 · fixed in 2.11.4

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

• CWE-441

<1.14.7 · fixed in 1.14.7

CoreDNS: Unauthenticated memory exhaustion in custom transports

• Denial of service

<1.14.7 · fixed in 1.14.7

OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning

• Weak cryptography or TLS
• CWE-923

<0.21.0 · fixed in 0.21.0

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

• Information disclosure

>=1.5.0, <1.45.0 · fixed in 1.45.0

oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing

• Server-side request forgery (SSRF)

<2.6.2 · fixed in 2.6.2

oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)

• Path traversal

<2.6.2 · fixed in 2.6.2

Skipper has OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix GHSA-8qqm-fp2q-v734)

• Broken access control

<0.27.37 · fixed in 0.27.37

RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

• CWE-681

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

• CWE-754

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

• Denial of service

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

• Memory corruption

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields

• CWE-316

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

• CWE-195

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

• Weak cryptography or TLS
• CWE-316

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection

• CWE-116

<1.13.0 · fixed in 1.13.0

RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

• Denial of service

<1.13.0 · fixed in 1.13.0

Pocketbase: Unhandled panic in worker goroutines

• CWE-248

<0.22.48 || >=0.23.0, <0.39.7 · fixed in 0.22.48, 0.39.7