Go Advisories.

Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

• Denial of service

>=2.8.1, <2.11.1-0.20260911060113-ea12859e43c6 · fixed in 2.11.1-0.20260911060113-ea12859e43c6

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

• Denial of service

<0.4.1 · fixed in 0.4.1

Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows

• Memory corruption
• CWE-129

>=1.1.0, <=1.4.1 · no fixed version yet

Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics

• CWE-129

>=2.10.1, <2.11.1-0.20260908032718-ecd99d761fe0 · fixed in 2.11.1-0.20260908032718-ecd99d761fe0

Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

• Denial of service

>=2.3.1, <2.11.1-0.20260906004932-2badfcd5841d · fixed in 2.11.1-0.20260906004932-2badfcd5841d

Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref

• Memory corruption
• CWE-129

>=2.7.1, <2.11.1-0.20260820023833-99903a3240e5 · fixed in 2.11.1-0.20260820023833-99903a3240e5

Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

• Memory corruption

>=2.0.0, <2.11.1-0.20260816084418-46a5eb289448 · fixed in 2.11.1-0.20260816084418-46a5eb289448

Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

• Memory corruption
• CWE-129

>=2.7.0, <2.11.1-0.20260812075026-be7a16390fa6 · fixed in 2.11.1-0.20260812075026-be7a16390fa6

Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process

• Denial of service

>=2.1.0, <2.11.1-0.20260807015645-a54c578af309 · fixed in 2.11.1-0.20260807015645-a54c578af309

Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

• Memory corruption
• CWE-681

>=2.1.0, <2.11.1-0.20260805032953-db93f8d89de7 · fixed in 2.11.1-0.20260805032953-db93f8d89de7

Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml

• CWE-20
• CWE-129

>=2.8.0, <2.11.1-0.20260731010303-ae2113b410e5 · fixed in 2.11.1-0.20260731010303-ae2113b410e5

Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

• SQL injection

<0.0.0-20260625085520-a7d027dc684b · fixed in 0.0.0-20260625085520-a7d027dc684b

Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

• Hard-coded credentials

<0.0.0-20260625091610-b2e942031ff8 · fixed in 0.0.0-20260625091610-b2e942031ff8

Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

• Authentication bypass

<0.0.0-20260625093330-5e90809657c9 · fixed in 0.0.0-20260625093330-5e90809657c9

Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

• Memory corruption

<0.41.0 · fixed in 0.41.0

Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

• Denial of service
• CWE-693

>=3.0.0, <3.8.1 · fixed in 3.8.1

Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

• CWE-20
• CWE-693

>=3.4.0, <3.8.0 · fixed in 3.8.0

Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields

• Other injection

>=3.0.0, <3.8.0 · fixed in 3.8.0

External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration

• CWE-696

>=0.10.0, <1.3.2 · fixed in 1.3.2

Snowflake drivers writes sensitive information to logs

• Information disclosure

<=1.19.1 · no fixed version yet

SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)

• Information disclosure

<0.0.0-20260819144130-256d73aa7f94 · fixed in 0.0.0-20260819144130-256d73aa7f94

SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/*

• Information disclosure
• Broken access control

<0.0.0-20260816034002-035bf9a8c311 · fixed in 0.0.0-20260816034002-035bf9a8c311

gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled

• Privilege escalation

<1.0.9-0.20260731160927-34bfa1915022 · fixed in 1.0.9-0.20260731160927-34bfa1915022

SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)

• Server-side request forgery (SSRF)

<0.0.0-20260813142806-dd2778b70d02 · fixed in 0.0.0-20260813142806-dd2778b70d02

SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)

• Path traversal

<0.0.0-20260813142104-b26a4a307b8a · fixed in 0.0.0-20260813142104-b26a4a307b8a

SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers

• Broken access control
• CWE-204

<0.0.0-20260804015139-bd067a4fe9b2 · fixed in 0.0.0-20260804015139-bd067a4fe9b2

SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass

• Cross-site request forgery (CSRF)
• Server-side request forgery (SSRF)

<0.0.0-20260803045322-cb67e0b4fab5 · fixed in 0.0.0-20260803045322-cb67e0b4fab5

Anubis: Policy bypass via client controlled X-Original-URI header

• Broken access control

>=1.22.0, <1.26.0 · fixed in 1.26.0

Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces in github.com/cilium/cilium

• Broken access control

<1.17.17 || >=1.18.0, <1.18.11 || >=1.19.0, <1.19.5 · fixed in 1.17.17, 1.18.11, 1.19.5

SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block

• Broken access control

<0.0.0-20260812083335-251596fc0de2 · fixed in 0.0.0-20260812083335-251596fc0de2

SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route

• Broken access control

>=0.0.0-20260726161145-9b8e8956f997, <0.0.0-20260812083335-251596fc0de2 · fixed in 0.0.0-20260812083335-251596fc0de2

SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering

• Broken access control

<0.0.0-20260812083335-251596fc0de2 · fixed in 0.0.0-20260812083335-251596fc0de2

SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem

• Broken access control

<0.0.0-20260812083335-251596fc0de2 · fixed in 0.0.0-20260812083335-251596fc0de2

SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check

• Broken access control

<0.0.0-20260812083335-251596fc0de2 · fixed in 0.0.0-20260812083335-251596fc0de2

SiYuan discloses an administrator's open documents and search terms to anonymous readers

• Broken access control

<0.0.0-20260812083335-251596fc0de2 · fixed in 0.0.0-20260812083335-251596fc0de2

SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking

• SQL injection

<0.0.0-20260721043339-eef10568384e · fixed in 0.0.0-20260721043339-eef10568384e

OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full

• Denial of service

<0.21.0 · fixed in 0.21.0

OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation

• Denial of service
• CWE-176

>=1.10.0, <1.33.0 · fixed in 1.33.0

Containerd has image-pull DoS via crafted OCI index graph amplification

• Denial of service

<1.7.36 · fixed in 1.7.36

Podman: Malformed Image can trick podman run into leaking host environment variables into the container

• Information disclosure

>=1.8.1 · no fixed version yet

ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass

• Broken access control

<=1.6.0 · no fixed version yet

ZITADEL: MFA bypass via session reuse in Login V2

• Authentication bypass

<1.80.0-v2.20.0.20260717062356-56f4798ed31f · fixed in 1.80.0-v2.20.0.20260717062356-56f4798ed31f

ZITADEL: Actions V1 sandbox escape: host file read via require()

• Broken access control

<1.80.0-v2.20.0.20260717062331-baf6ed501b68 · fixed in 1.80.0-v2.20.0.20260717062331-baf6ed501b68

Dozzle label filters do not restrict container event and statistics streams

• Information disclosure
• Broken access control

<1.29.1-0.20260622172006-19c01e0fb491 · fixed in 1.29.1-0.20260622172006-19c01e0fb491

podman quadlet install --replace does not fully replace the old file

• CWE-20
• CWE-459

>=5.7.0, <5.8.6 · fixed in 5.8.6

Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS

• CWE-20

<1.7.20 · fixed in 1.7.20

Klever-Go: Elasticsearch bulk / painless injection via on-chain account name -> explorer/indexer data forgery

• CWE-116

<1.7.20 · fixed in 1.7.20

Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

• CWE-841

<1.7.20 · fixed in 1.7.20

Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller

• Broken access control

<1.7.20 · fixed in 1.7.20

Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)

• Denial of service

<1.7.20 · fixed in 1.7.20

Klever-Go: /log controls global node logging

• Information disclosure
• Authentication bypass

<1.7.20 · fixed in 1.7.20

Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle

• CWE-208

* · no fixed version yet

Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter

• Broken access control

<0.106.1 · fixed in 0.106.1

Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher

• Broken access control

<0.95.3 · fixed in 0.95.3

Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses

• Server-side request forgery (SSRF)
• CWE-697

<4.0.0-20260715072853-1c5cad6dec7e · fixed in 4.0.0-20260715072853-1c5cad6dec7e

Gardener: Authorization Bypass via Group Subject Injection

• Broken access control

<1.142.6 || >=1.143.0, <1.143.3 || >=1.144.0, <1.144.2 · fixed in 1.142.6, 1.143.3, 1.144.2

Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

• Broken access control

<4.0.0-20260715070110-bce08f88e9d8 · fixed in 4.0.0-20260715070110-bce08f88e9d8

Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

• Race condition
• Denial of service

<4.0.0-20260715025621-7329602751c0 · fixed in 4.0.0-20260715025621-7329602751c0

Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

• Information disclosure

>=3.0.0, <3.10.0 · fixed in 3.10.0

Nuclei: Local File Read via Workflow File-Protocol Gate Bypass

• Broken access control

>=3.0.0, <3.10.0 · fixed in 3.10.0