Go Advisories.

Duplicate Advisory: chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For

• CWE-348

<=5.3.2 · no fixed version yet

Distrust compromised intermediate certificates in crypto/x509

• CWE-299

<1.26.10 || >=1.27.0-0, <1.27.3 · fixed in 1.26.10, 1.27.3

Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress

• Memory corruption

<1.18.7 · fixed in 1.18.7

Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core

>=1.260113.0, <1.260327.1-0.20260710210335-64fada32b5b9 · fixed in 1.260327.1-0.20260710210335-64fada32b5b9

agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable

• Hard-coded credentials
• Broken access control

>=0.4.0-rc1, <1.2.0-rc1 · fixed in 1.2.0-rc1

Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)

• Privilege escalation

<2.6.0 · fixed in 2.6.0

Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`

• Broken access control

<2.11.0 · fixed in 2.11.0

kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

• Memory corruption

<0.146.0 · fixed in 0.146.0

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

• CWE-248
• CWE-755

>=1.9.4, <1.14.5 · fixed in 1.14.5

gomarkdown/markdown IsSafeURL panics on short URLs

• Memory corruption

<0.0.0-20260724235538-61af6e1e6971 · fixed in 0.0.0-20260724235538-61af6e1e6971

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

• CWE-693

>=4.4.0, <5.8.8 · fixed in 5.8.8

SFTPGo source-side file-pattern filter bypass during copy operations

• Broken access control

>=2.5.0, <2.7.6 · fixed in 2.7.6

containerd: Unpack DoS via repeated opaque whiteouts

• Denial of service

<1.7.35 · fixed in 1.7.35

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

• CWE-354

<3.1.2 · fixed in 3.1.2

containerd CRI plugin: Checkpoint restore bypasses destination security context

• Privilege escalation

>=2.1.0, <2.2.7 || >=2.3.0, <2.3.4 · fixed in 2.2.7, 2.3.4

kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter

• Memory corruption

>=0.136.0, <0.149.0 · fixed in 0.149.0

kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

• Denial of service

<0.149.0 · fixed in 0.149.0

kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

• CWE-754

<0.148.0 · fixed in 0.148.0

Talos Linux: Support bundle does not redact registry credentials

• Information disclosure

<1.14.0-alpha.0.0.20260513110206-76080416beee · fixed in 1.14.0-alpha.0.0.20260513110206-76080416beee

KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

• Privilege escalation
• Server-side request forgery (SSRF)

<=1.5.0 · no fixed version yet

Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

• Broken access control

>=2.10.0, <=2.14.21 · no fixed version yet

kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

• CWE-289
• CWE-436

>=0.144.0, <0.147.0 · fixed in 0.147.0

kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression

• Denial of service
• CWE-1050

>=0.145.0, <0.146.0 · fixed in 0.146.0

Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service

• Authentication bypass
• Broken access control

<25.4.0 · fixed in 25.4.0

Vitess vttablet /twopcz reflected XSS

• Cross-site scripting (XSS)
• CWE-116

<0.23.5 || >=0.24.0, <0.24.2 · fixed in 0.23.5, 0.24.2

kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)

• Memory corruption

<0.145.0 · fixed in 0.145.0

kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path

• CWE-20
• CWE-248

<0.145.0 · fixed in 0.145.0

Gotify: Insufficiently Protected Password Change endpoint

• CWE-620

<=2.9.1 · no fixed version yet

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant

• Race condition
• Memory corruption

>=0.0.0-20260628010923-fd31e5f1b0f8, <0.0.0-20260721131105-c893aa57867d · fixed in 0.0.0-20260721131105-c893aa57867d

kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items

• Memory corruption
• CWE-248

>=0.136.0, <0.143.0 · fixed in 0.143.0

FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

• Race condition
• CWE-488

<1.12.5 · fixed in 1.12.5

SFTPGo: Denial of service via malformed SSH channel request

• CWE-129

<2.7.5 · fixed in 2.7.5

Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools

• Authentication bypass

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable

• Authentication bypass

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)

• CWE-20
• CWE-184

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)

• Authentication bypass
• Cross-site request forgery (CSRF)

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI OTP secure-session step-up is missing on sensitive mutation routes

• Broken access control

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Management Endpoint

• Broken access control

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeover

• Authentication bypass

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE

• CWE-693

>=1.9.10-0.20250506154222-1330888280a2, <1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)

• CWE-20
• CWE-693

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: Auto backup name allows path traversal outside validated storage path

• Path traversal

<1.9.10-0.20260715121709-f92218e01054 · fixed in 1.9.10-0.20260715121709-f92218e01054

Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context

• CWE-693

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder

• Denial of service

<1.7.6 · fixed in 1.7.6

Terragrunt catalog predictable temp symlink clobber

• Path traversal
• CWE-377

<1.1.1 · fixed in 1.1.1

GitHub CLI allows attestation verification bypass through unescaped regex metacharacters

• CWE-185

<2.97.0 · fixed in 2.97.0

GitHub CLI allows path traversal through unescaped request URL components

• Path traversal

<2.97.0 · fixed in 2.97.0

GitHub CLI partially discloses authentication tokens in `gh auth status` output

• Information disclosure

<2.97.0 · fixed in 2.97.0

Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted

• CWE-942

>=2.2.0, <=2.6.0 · no fixed version yet

Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check

• Broken access control

>=0.13.0, <2.7.0 · fixed in 2.7.0

Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0)

• Privilege escalation
• Broken access control

>=2.6.0, <2.7.0 · fixed in 2.7.0

Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed

• Authentication bypass
• Broken access control

>=0.22.0, <=2.6.0 · no fixed version yet

Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants

• Broken access control

>=1.0.0-rc0, <2.7.0 · fixed in 2.7.0

Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes

• Authentication bypass

>=2.3.0, <2.7.0 · fixed in 2.7.0

Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage

• Denial of service

>=1.9.10-0.20260729084040-acb59fdd81db, <1.9.10-0.20260901043436-8c9b9a1aff21 · fixed in 1.9.10-0.20260901043436-8c9b9a1aff21

Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout

• CWE-346

>=1.9.10-0.20251005005631-6de168c9454, <1.9.10-0.20260904075558-e30e331303fc · fixed in 1.9.10-0.20260904075558-e30e331303fc

Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal

• Broken access control

>=0.9, <2.6.0 · fixed in 2.6.0

Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint

• Information disclosure

<2.6.0 · fixed in 2.6.0

Vikunja: Cross-project task disclosure through subtask expansion

• Information disclosure
• Broken access control

<2.6.0 · fixed in 2.6.0

Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID

• Broken access control

<2.6.0 · fixed in 2.6.0