Public research · coordinated disclosure
What we found in the layers everyone else's security depends on: signing, transparency, update frameworks, certificate validation, attestation, policy. Every record links to an upstream artifact — advisory, fix commit, release, or credit line. Source facts and researcher mappings are distinguished in each record; a public fix is not automatically public credit.
Records are evidence, not a unique vulnerability count.
One finding may produce several records; one record may cover several findings. Finding IDs are mechanically deduplicated. The headline adds counted CVE/GHSA records, security PRs, credited fixes, reported fixes and hardening/testing records. Long-form write-ups live on Advisories, not as duplicate Research records. A finding documented only by a write-up remains here as a documented finding. Neither those rows nor historical fixes add headline records.
Data revision 2026-09-26 (source checks are dated separately in details) · source portfolio.json · source digest d8b9c39f7975be56b62eead0ef9d72237f3f6ef46b006a0d7072732d35d5761e
Published snapshot; upstream changes are not checked here. Optional source-byte comparison requires JavaScript.
On this page
Chosen for what they demonstrate, not for severity. Every one is externally verifiable upstream.
Three of 317 records. Browse the full corpus → · Research recognition
Which security property is at issue? Select an area to browse its records, replacing previous filters.
311 of 322 records have a primary area.
11 remain unassigned where source detail is insufficient or a contribution has no single affected property; reasons are retained in record evidence. These are editorial assessments of public evidence, not new vendor findings. This view counts records, so several records may concern the same finding.
How does the error happen? Select a mechanism to browse its records, replacing previous filters.
287 of 308 finding IDs have a recorded mechanism; 12 concern general hardening/testing; 9 need source detail.
Related records sharing an ID count once here. These are editorial classifications, not new vendor assessments. Do not add the two views together. Overview counts stay global; selections open a filtered list in Browse records.
Across the full portfolio, ordered by visible record count, then name. This is a distribution of records, not an impact ranking or endorsement. Select a group to browse its projects, replacing previous filters.
322 of 322 records · 308 finding IDs
No filters applied
Local file overwrite by extracting a malicious tar archive
Fixed in: go.podman.io/buildah/copier 1.43.4 / 1.45.1
Full sources, classification reasons and claim limits are on the finding page.
Local file overwrite by extracting a malicious tar archive
Fixed in: go.podman.io/image/v5 5.39.3 / 5.41.2; go.podman.io/storage 1.62.1 / 1.64.1
Full sources, classification reasons and claim limits are on the finding page.
Trezor Safe improper security check in on-device display
Fixed in: Trezor Safe 3, Safe 5, and Safe 7 (commit 70c9b0c)
Full sources, classification reasons and claim limits are on the finding page.
Verification accepts any valid Rekor entry under certain conditions
Fixed in: cosign v2.6.2, v3.0.4
Full sources, classification reasons and claim limits are on the finding page.
COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message
Fixed in: rekor 1.5.0
Full sources, classification reasons and claim limits are on the finding page.
Server-Side Request Forgery (SSRF) via provided public key URL
Fixed in: rekor 1.5.0
Full sources, classification reasons and claim limits are on the finding page.
Signatures considered valid with certificates that outlive expired CA certificates
Fixed in: cosign 3.0.5
Full sources, classification reasons and claim limits are on the finding page.
Legacy TUF client allows for arbitrary file writes with target cache path traversal
Fixed in: sigstore 1.10.4
Full sources, classification reasons and claim limits are on the finding page.
Insufficient Verification of Data Authenticity in sigstore-js
Fixed in: @sigstore/verify 3.1.1
Full sources, classification reasons and claim limits are on the finding page.
Client DoS via malformed server response
Fixed in: go-tuf/v2 2.3.1
Full sources, classification reasons and claim limits are on the finding page.
Improper validation of configured threshold for delegations
Fixed in: go-tuf/v2 2.3.1
Full sources, classification reasons and claim limits are on the finding page.
go-tuf TAP 4 multirepo repoName path traversal escapes local metadata cache directory
Fixed in: go-tuf/v2 2.4.1
Full sources, classification reasons and claim limits are on the finding page.
OCI image scanning could expose registry credentials
Fixed in: malcontent 1.20.3
Full sources, classification reasons and claim limits are on the finding page.
Archive extraction could write outside extraction directory
Fixed in: malcontent 1.20.3
Full sources, classification reasons and claim limits are on the finding page.
Path traversal in apko dirFS allows filesystem writes outside base
Fixed in: apko (commit d8b7887)
Full sources, classification reasons and claim limits are on the finding page.
potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams
Fixed in: apko (commit 2be3903)
Full sources, classification reasons and claim limits are on the finding page.
unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams
Fixed in: apko v1.1.0
Full sources, classification reasons and claim limits are on the finding page.
apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root
Fixed in: apko v1.2.5
Full sources, classification reasons and claim limits are on the finding page.
apko `DiscoverKeys` has a panic on non-rsa jwks key that causes crash during key discovery
Fixed in: apko v1.2.7
Full sources, classification reasons and claim limits are on the finding page.
apko doesn't verify downloaded apk packages against APKINDEX checksum (package substitution possible)
Fixed in: apko v1.2.7
Full sources, classification reasons and claim limits are on the finding page.
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
Fixed in: GnuTLS 3.8.13
Full sources, classification reasons and claim limits are on the finding page.
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
Fixed in: GnuTLS 3.8.13
Full sources, classification reasons and claim limits are on the finding page.
Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
Fixed in: GnuTLS 3.8.13
Full sources, classification reasons and claim limits are on the finding page.
Pipeline working-directory could allow command injection
Fixed in: melange (commit e51ca30c)
Full sources, classification reasons and claim limits are on the finding page.
QEMU runner could write files outside workspace directory
Fixed in: melange (commit 6e243d0d)
Full sources, classification reasons and claim limits are on the finding page.
potential host command execution via license-check YAML mode patch pipeline
Fixed in: melange (commit bd132535)
Full sources, classification reasons and claim limits are on the finding page.
path traversal in `license-path` allows reading files outside workspace
Fixed in: melange (commit 2f95c9f)
Full sources, classification reasons and claim limits are on the finding page.
cert-manager-controller DoS via Specially Crafted DNS Response
Fixed in: cert-manager v1.18.5, v1.19.3
Full sources, classification reasons and claim limits are on the finding page.
script injection via sourced env file in composite action
Fixed in: trivy-action >= 0.34.0
Full sources, classification reasons and claim limits are on the finding page.
cross-origin config application via local admin API /load (caddy)
Fixed in: caddy v2.11.0
Full sources, classification reasons and claim limits are on the finding page.
sealed-secrets /v1/rotate can widen sealing scope to cluster-wide via attacker-controlled template annotations
Fixed in: sealed-secrets v0.36.0
Full sources, classification reasons and claim limits are on the finding page.
Case-Sensitive Bypass in Connection Header Allows Removal of X-Forwarded Headers
Upstream fixed versions: Traefik: v2.11.38; Traefik: v3.6.9
Full sources, classification reasons and claim limits are on the finding page.
TLS Handshake Error Handling Allows Stalled Connections on TCP Routers
Upstream fixed versions: Traefik: v2.11.38; Traefik: v3.6.9
Full sources, classification reasons and claim limits are on the finding page.
Kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values
Fixed in: v3.6.10
Full sources, classification reasons and claim limits are on the finding page.
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Fixed in: AWS-LC 1.71.0
Full sources, classification reasons and claim limits are on the finding page.
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Fixed in: aws-lc-sys 0.39.0
Full sources, classification reasons and claim limits are on the finding page.
Path traversal in `sops exec-file --filename` leaks decrypted plaintext outside temporary directory
Fixed in: sops 3.13.0
Full sources, classification reasons and claim limits are on the finding page.
HC Vault / OpenBao token exfiltration when decrypting untrusted SOPS-encrypted files
Full sources, classification reasons and claim limits are on the finding page.
LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic
Fixed in: spicedb v1.49.1
Full sources, classification reasons and claim limits are on the finding page.
CRLs not considered authoritative by Distribution Point due to faulty matching logic
Fixed in: 0.104.0-alpha.5, 0.103.10
Full sources, classification reasons and claim limits are on the finding page.
Name constraints for URI names were incorrectly accepted
Fixed in: >= 0.103.12, >= 0.104.0-alpha.6
Full sources, classification reasons and claim limits are on the finding page.
Name constraints were accepted for certificates asserting a wildcard name
Fixed in: >= 0.103.12, >= 0.104.0-alpha.6
Full sources, classification reasons and claim limits are on the finding page.
Panic in history index request handlers when a full node runs without the history index
Fixed in: nimiq-blockchain v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
Untrusted peer can crash address book via empty peer contact addresses
Fixed in: nimiq-network-libp2p v1.4.0
Full sources, classification reasons and claim limits are on the finding page.
Full sources, classification reasons and claim limits are on the finding page.
Peer can crash the node by opening discovery protocol substream twice
Fixed in: network-libp2p v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
nimiq-libp2p request/response codec reads entire stream before size validation
Fixed in: network-libp2p v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)
Full sources, classification reasons and claim limits are on the finding page.
Request/Response inbound failure retains stale `response_channels` state after attacker-controlled failed requests
Fixed in: nimiq-network-libp2p v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
Discovery peer contact book poisoning via future timestamps
Fixed in: v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
BlockInclusionProof interlink issue when hops are empty
Fixed in: nimiq-primitives v1.4.0
Full sources, classification reasons and claim limits are on the finding page.
Malicious frontend can cause file escape outside of storage root
Fixed in: v0.28.1+
Full sources, classification reasons and claim limits are on the finding page.
X.509: bypass of name constraints on wildcard SANs with matching peer names
Fixed in: >= 46.0.6
Full sources, classification reasons and claim limits are on the finding page.
Sandbox skill mirroring path traversal could write outside the sandbox workspace
Fixed in: openclaw >= 2026.2.14
Full sources, classification reasons and claim limits are on the finding page.
create-only policy allows overwrite attempts of existing latest tag (update permission not required)
Upstream fixed versions: zot: v2.1.15
Full sources, classification reasons and claim limits are on the finding page.
JWKS Resolver Failure May Expose Hardcoded Default Keys
Fixed in: 1.29.1, 1.28.5, 1.27.8
Full sources, classification reasons and claim limits are on the finding page.
Debug Endpoints Allow Cross-Namespace Proxy Data Access
Fixed in: 1.29.1, 1.28.5, 1.27.8
Full sources, classification reasons and claim limits are on the finding page.
Full sources, classification reasons and claim limits are on the finding page.
Nested archive extraction failure can drop content from scan inputs
Fixed in: malcontent v1.21.0
Full sources, classification reasons and claim limits are on the finding page.
Path traversal in Tekton Pipelines git resolver allows reading arbitrary files from the resolver pod
Fixed in: v1.0.1, v1.3.3, v1.6.1, v1.9.2, v1.10.2
Full sources, classification reasons and claim limits are on the finding page.
wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation
Fixed in: wolfSSL 5.9.0
Full sources, classification reasons and claim limits are on the finding page.
Full sources, classification reasons and claim limits are on the finding page.
URI nameConstraints not enforced in ConfirmNameConstraints()
Fixed in: wolfSSL 5.9.1
Full sources, classification reasons and claim limits are on the finding page.
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun
Upstream fixed versions: github.com/tektoncd/pipeline: 1.0.1, 1.3.3, 1.6.1, 1.9.2, 1.10.2
Full sources, classification reasons and claim limits are on the finding page.
VerificationPolicy regex pattern bypass via substring matching
Upstream fixed versions: github.com/tektoncd/pipeline: 1.0.2, 1.3.4, 1.6.2, 1.9.3, 1.11.1
Full sources, classification reasons and claim limits are on the finding page.
Error-path cleanup gap can leak scanners and fds and degrade availability
Fixed in: malcontent v1.21.0
Full sources, classification reasons and claim limits are on the finding page.
Missing proposal body root verification
Fixed in: nimiq-blockchain v1.2.2
Full sources, classification reasons and claim limits are on the finding page.
Macro block proposal interlink bug
Fixed in: nimiq-blockchain v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
`UpdateValidator` transactions allows voting key change without proof-of-knowledge
Fixed in: v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
Panic via `HistoryTreeProof` length mismatch
Fixed in: v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
Full sources, classification reasons and claim limits are on the finding page.
Peer-triggerable crash via invalid election macro validators voting key hashing announced macro blocks
Fixed in: v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
Full sources, classification reasons and claim limits are on the finding page.
skip block quorum bypass via out-of-range BitSet indices + u16 truncation
Fixed in: v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
tar archive path traversal in build context extraction allows writing files outside destination directory
Upstream fixed versions: package name not specified: no patched version listed
Full sources, classification reasons and claim limits are on the finding page.
unbounded HTTP download in `melange update-cache` can exhaust disk in CI
Upstream fixed versions: package name not specified: v0.43.4
Full sources, classification reasons and claim limits are on the finding page.
Path traversal in melange's external pipeline resolver (pipeline[].uses) allows loading a pipeline from outside the pipeline directories
Fixed in: melange v0.43.4
Full sources, classification reasons and claim limits are on the finding page.
Path traversal in melange --persist-lint-results via unvalidated .PKGINFO fields
Fixed in: melange v0.43.4
Full sources, classification reasons and claim limits are on the finding page.
Full sources, classification reasons and claim limits are on the finding page.
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Fixed in: VS Code 1.110.1; VS Code Copilot Chat Extension 0.37.1
Full sources, classification reasons and claim limits are on the finding page.
Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
Fixed in: upstream commit 4f28b87fdd24
Full sources, classification reasons and claim limits are on the finding page.
AuthZ plugin bypass with oversized request body
Upstream fixed versions: Docker Engine: 29.3.1
Full sources, classification reasons and claim limits are on the finding page.
Pull-through cache credential exfiltration via www-authenticate bearer realm
Upstream fixed versions: distribution: >=3.1.0
Full sources, classification reasons and claim limits are on the finding page.
Stale blob access resurrection via repo-scoped redis descriptor cache invalidation
Upstream fixed versions: package name not specified: >=3.1.0
Full sources, classification reasons and claim limits are on the finding page.
multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)
Upstream fixed versions: go.opentelemetry.io/otel/baggage: v1.41.0; go.opentelemetry.io/otel/propagation: v1.41.0
Full sources, classification reasons and claim limits are on the finding page.
OTLP HTTP exporters read unbounded HTTP response bodies
Upstream fixed versions: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.43.0; go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp: v1.43.0; go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp: v0.19.0
Full sources, classification reasons and claim limits are on the finding page.
OTLP exporter reads unbounded HTTP response bodies
Fixed in: 1.15.2
Full sources, classification reasons and claim limits are on the finding page.
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Fixed in: go1.26.2
Full sources, classification reasons and claim limits are on the finding page.
Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment
Fixed in: 3.20.2, 4.1.4
Full sources, classification reasons and claim limits are on the finding page.
Index out-of-bounds panic via crafted AK certificate with empty EKU in TPM device attestation
Fixed in: v0.30.0
Full sources, classification reasons and claim limits are on the finding page.
Remote crash via off-by-one signer bounds check in proposal buffer
Fixed in: v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
Panic via RequestMacroChain micro-block locator
Fixed in: v1.3.0
Full sources, classification reasons and claim limits are on the finding page.
kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token
Fixed in: 1.16.4
Full sources, classification reasons and claim limits are on the finding page.
Heap out-of-bounds write in tiano decompressor `ReadCLen`
Fixed in: CVE record: 1.14; GHSA: 1.13 (conflicting version metadata)
Full sources, classification reasons and claim limits are on the finding page.
Stack out-of-bounds write in tiano decompressor MakeTable
Fixed in: CVE record: 1.14; GHSA: 1.13 (conflicting version metadata)
Full sources, classification reasons and claim limits are on the finding page.
Inconsistent negation behavior between in-toto-golang and in-toto-python
Fixed in: in-toto-golang v0.11.0
Full sources, classification reasons and claim limits are on the finding page.
Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header
Fixed in: 2.0.0, 1.21.5, 1.20.10, 1.19.16
Full sources, classification reasons and claim limits are on the finding page.
Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS
Fixed in: Vault CE 2.0.0; Vault Enterprise 2.0.0, 1.21.5, 1.20.10, 1.19.16
Full sources, classification reasons and claim limits are on the finding page.
Keycloak: Unauthorized access via improper validation of encrypted SAML assertions
Fixed in: 26.2.14, 26.4.10, 26.5.5, 26.6.0
Full sources, classification reasons and claim limits are on the finding page.
Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python
Fixed in: 3.3.1, 4.0.5
Full sources, classification reasons and claim limits are on the finding page.
Memory Corruption in event-stream parsing of headers
Fixed in: aws-c-event-stream 0.6.0; aws-sdk-cpp 1.11.764
Full sources, classification reasons and claim limits are on the finding page.
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
Fixed in: aws/protocol/eventstream v1.7.8; service-specific versions listed in the advisory
Full sources, classification reasons and claim limits are on the finding page.
Signature Threshold Bypass in awslabs/tough Delegated Roles
Fixed in: tough 0.22.0, tuftool 0.15.0
Full sources, classification reasons and claim limits are on the finding page.
Missing Delegated Metadata Validation in awslabs/tough
Fixed in: tough 0.22.0, tuftool 0.15.0
Full sources, classification reasons and claim limits are on the finding page.
Multiple Path Traversal Variants in awslabs/tough
Fixed in: tough 0.22.0, tuftool 0.15.0
Full sources, classification reasons and claim limits are on the finding page.
rxrpc: Fix RxGK token loading to check bounds
Fixed in: Linux kernel upstream
Full sources, classification reasons and claim limits are on the finding page.
tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
Fixed in: Linux kernel upstream
Full sources, classification reasons and claim limits are on the finding page.
bt: l2cap le coc: remote oob write via seg counter stored in net_buf user_data
Fixed in: main PR #104913, v4.3 PR #108335; v3.7 backport pending
Full sources, classification reasons and claim limits are on the finding page.
Bearer realm URL not validated, enabling SSRF to internal networks and TLS downgrade
Fixed in: oras-go v2.7.0
Full sources, classification reasons and claim limits are on the finding page.
credential forwarding via unvalidated Location header in oras-go blob upload
Upstream fixed versions: https://github.com/oras-project/oras-go: v2.6.2
Full sources, classification reasons and claim limits are on the finding page.
io.element.call deeplink allows attacker-controlled HTTPS origin and may grant mic/camera to that origin
Fixed in: Element X iOS 26.05.0
CVE-2026-55644: RESERVED; not counted as a published CVE
Full sources, classification reasons and claim limits are on the finding page.
Abnormal process termination in DNS UDP filter
Fixed in: Envoy 1.35.12, 1.36.8, 1.37.4, 1.38.2
Full sources, classification reasons and claim limits are on the finding page.
Bluetooth: SMP: force responder MITM requirements before building the pairing response
Fixed in: Linux 7.0; stable backports listed in the CNA record; mainline d05111bfe37bfd8bd4d2dfe6675d6bdeef43f7c7
Full sources, classification reasons and claim limits are on the finding page.
Bluetooth: SMP: derive legacy responder STK authentication from MITM state
Fixed in: Linux 7.0; stable backports listed in the CNA record; mainline 20756fec2f0108cb88e815941f1ffff88dc286fe
Full sources, classification reasons and claim limits are on the finding page.
Bluetooth: hci_event: move wake reason storage into validated event handlers
Fixed in: Linux 7.0; stable backports listed in the CNA record; mainline 2b2bf47cd75518c36fa2d41380e4a40641cc89cd
Full sources, classification reasons and claim limits are on the finding page.
file store write outside workingDir via symlink traversal in oras-go
Fixed in: CVE record: 2.6.1; GHSA: 2.6.2 (conflicting version metadata)
Full sources, classification reasons and claim limits are on the finding page.
reject malformed ReplaceOp payloads without a panic
Full sources, classification reasons and claim limits are on the finding page.
docs: clarify file_server hide case-sensitivity
Full sources, classification reasons and claim limits are on the finding page.
Cap request body size in submission proxy
Full sources, classification reasons and claim limits are on the finding page.
docs: clarify proxy cache trust boundary for upstream token-service discovery
Full sources, classification reasons and claim limits are on the finding page.
acmeserver: warn when policy rules unset
Full sources, classification reasons and claim limits are on the finding page.
More validation of delegated OCSP responders
Full sources, classification reasons and claim limits are on the finding page.
ocsp: add delegated responder authorization regression test
Full sources, classification reasons and claim limits are on the finding page.
set explicit http server timeouts
Fixed in: v1.3.3
Full sources, classification reasons and claim limits are on the finding page.
remote crash in rekor response handling via unsafe e.body.(string) type assertion
Full sources, classification reasons and claim limits are on the finding page.
remote crash in policy evaluation via unsafe attestation payload type assertion
Full sources, classification reasons and claim limits are on the finding page.
bundle parsing dos via unbounded tlogentries
Full sources, classification reasons and claim limits are on the finding page.
nil pointer dereference in publickey() via malformed pem
Full sources, classification reasons and claim limits are on the finding page.
remote crash in online tlog verification via nil pointer dereference in verifytlogentryoffline
Full sources, classification reasons and claim limits are on the finding page.
timestamp response verification accepts revoked tsa certificate (no crl/ocsp checking)
Full sources, classification reasons and claim limits are on the finding page.
ntp drift does not gate timestamp issuance
Full sources, classification reasons and claim limits are on the finding page.
tlog entry validation fail-open (rekor v2 protojson parsing)
Full sources, classification reasons and claim limits are on the finding page.
certificate identity regex not auto-anchored enables identity policy bypass
Full sources, classification reasons and claim limits are on the finding page.
docs(crd): clarify ctlog:{} disables tlog verification
Full sources, classification reasons and claim limits are on the finding page.
rfc3161 timestamp verification accepts revoked tsa certificate (no crl/ocsp checking)
Full sources, classification reasons and claim limits are on the finding page.
security hardening: relabel perf/dos guard
Full sources, classification reasons and claim limits are on the finding page.
feat(ngclient): require explicit bootstrap argument
Full sources, classification reasons and claim limits are on the finding page.
fix OSSL_parse_url userinfo scan to respect authority boundary
Full sources, classification reasons and claim limits are on the finding page.
x509: reject unauthorized stapled OCSP response signers
Full sources, classification reasons and claim limits are on the finding page.
Forbid GEN_OTHERNAME SMTP UTF8 email name constraints.
Full sources, classification reasons and claim limits are on the finding page.
pki/acme: reject unsafe validation targets during challenge verification
Full sources, classification reasons and claim limits are on the finding page.
reject crls with unrecognized critical extensions
Full sources, classification reasons and claim limits are on the finding page.
cms: Reject AES-256-CBC IV with invalid length
Full sources, classification reasons and claim limits are on the finding page.
Add a warning when TLS isn't enabled for Hubble Relay
Full sources, classification reasons and claim limits are on the finding page.
docker fetcher: strip sensitive headers on descriptor URLs
Full sources, classification reasons and claim limits are on the finding page.
fix: enforce timeout on external data provider requests
Full sources, classification reasons and claim limits are on the finding page.
srtpkdf input bounds checking
Full sources, classification reasons and claim limits are on the finding page.
hardening: minimum threshold for withintegratedtimestamps
Full sources, classification reasons and claim limits are on the finding page.
Don't modify http.DefaultTransport
Full sources, classification reasons and claim limits are on the finding page.
Apply hardening fixes from upstream Tiano implementation
Full sources, classification reasons and claim limits are on the finding page.
Type assert the entry bundle when verifying inclusion proof
Full sources, classification reasons and claim limits are on the finding page.
http_challenge SSRF fixed in v1.14.2 and v1.13.4
Full sources, classification reasons and claim limits are on the finding page.
[release/2.1] update to Go 1.25.9, 1.26.2
Full sources, classification reasons and claim limits are on the finding page.
[release/2.2] update to Go 1.25.9, 1.26.2
Full sources, classification reasons and claim limits are on the finding page.
Helm Chart extraction output directory collapse via Chart.yaml name dot-segment
Full sources, classification reasons and claim limits are on the finding page.
chore: update to Go 1.25.9, 1.26.9
Full sources, classification reasons and claim limits are on the finding page.
update to Go 1.26.2
Full sources, classification reasons and claim limits are on the finding page.
Rewrite constraint matching to avoid permissive catch-all branch
Full sources, classification reasons and claim limits are on the finding page.
Disallow wildcard partial domains when using MatchDomainName.
Full sources, classification reasons and claim limits are on the finding page.
Global executable ownership check accepts a prefix-colliding package directory
Fixed in: bin-links 6.0.1; also verified in npm 11.15.0 (bin-links 6.0.2)
Full sources, classification reasons and claim limits are on the finding page.
Deployment branch text is reinterpreted as Git command arguments
Fixed in: main and 4.0.0-canary-6848; stable 3.10.2 still uses the old command path
Full sources, classification reasons and claim limits are on the finding page.
Binary HTTP field-section length includes its own prefix
Fixed in: main fix commit; v2026.09.21.00 still contains the old parser
Full sources, classification reasons and claim limits are on the finding page.
Snapshot transport accepts file paths outside its destination root
Fixed in: public source commit; a separate fixed release is not established
Full sources, classification reasons and claim limits are on the finding page.
Exported activity accepts actions intended for internal VPN widgets
Fixed in: 5.19.72.0 source and release; installed store binaries not reverified
Full sources, classification reasons and claim limits are on the finding page.
Authenticator processes OTP deep links before completing local authentication
Fixed in: 1.4.0 source tag; App Store delivery not independently verified
Full sources, classification reasons and claim limits are on the finding page.
Deep-link upload path omits external URI validation
Fixed in: 2.40.0 source tag; also present in the later 3.0.0 source release
Full sources, classification reasons and claim limits are on the finding page.
Recovery and wallet import logging includes mnemonic words
Fixed in: v1.3.0+115 source tag; store rollout not independently verified
Full sources, classification reasons and claim limits are on the finding page.
Ambiguous multi-at-sign mailbox evades excluded email name constraints
Fixed in: Java 1.85 and C# 2.7.0, with default strict email-name parsing
Full sources, classification reasons and claim limits are on the finding page.
Model tensor dimension count can exceed a four-element stack array
Fixed in: verified in v1.9.4; not asserted to be the first fixed version
Full sources, classification reasons and claim limits are on the finding page.
Notary-sponsored transaction fees are not bounded by the individual payer deposit
Fixed in: v3.10.1; network deployment not independently verified
Full sources, classification reasons and claim limits are on the finding page.
Failed message verification logs received and computed authentication tags
Fixed in: v0.103.0 library release; downstream application rollout not established
Full sources, classification reasons and claim limits are on the finding page.
Configuration loader builds a path before validating the tunnel name
Fixed in: v1.1; recorded as defensive validation, not a confirmed reachable exploit
Full sources, classification reasons and claim limits are on the finding page.
bound preimage writes by the output buffer capacity
Full sources, classification reasons and claim limits are on the finding page.
correct an off-by-one move in BIP32 derivation parsing
Full sources, classification reasons and claim limits are on the finding page.
reject empty chunks in streamed preimage handling
Full sources, classification reasons and claim limits are on the finding page.
reject a derivation step at the array capacity boundary
Full sources, classification reasons and claim limits are on the finding page.
reject all negative merkleized-map return values before using their length
Full sources, classification reasons and claim limits are on the finding page.
clear MuSig nonce-related buffers on error paths
Full sources, classification reasons and claim limits are on the finding page.
enforce the collection capacity before adding a data-path element
Full sources, classification reasons and claim limits are on the finding page.
preserve chunk offsets while parsing RLP chain ID and nonce
Full sources, classification reasons and claim limits are on the finding page.
reject truncated calldata sizes and offsets in generic clear signing
Full sources, classification reasons and claim limits are on the finding page.
reject malformed ACME external-account-binding protected fields without a panic
Full sources, classification reasons and claim limits are on the finding page.
avoid ciphertext-sized stack allocation in CMS decryption
Full sources, classification reasons and claim limits are on the finding page.
validate the region name supplied by an S3 redirect
Full sources, classification reasons and claim limits are on the finding page.
create TUF cache directories with restrictive permissions
Full sources, classification reasons and claim limits are on the finding page.
limit webhook interceptor request bodies before reading them
Full sources, classification reasons and claim limits are on the finding page.
reject grouping file-exporter traversal through Windows path separators
Full sources, classification reasons and claim limits are on the finding page.
bound the verify endpoint request body
Fixed in: v0.29.0
Full sources, classification reasons and claim limits are on the finding page.
check reflector peer-tag length before subtracting the header size
Full sources, classification reasons and claim limits are on the finding page.
validate the boot image buffer across the syscall boundary
Full sources, classification reasons and claim limits are on the finding page.
check transport progress-token length before allocating the payload buffer
Full sources, classification reasons and claim limits are on the finding page.
avoid negative sample offsets in animated AVIF decoding
Fixed in: Firefox 150 (vendor tracker status)
Full sources, classification reasons and claim limits are on the finding page.
remove the GitHub preview webhook and its deployment configuration
Full sources, classification reasons and claim limits are on the finding page.
JSON injection in Mini App custom method response enables arbitrary JavaScript execution in WebAppWebView
Full sources, classification reasons and claim limits are on the finding page.
Non-Constant-Time Message Key Comparison in Secret Chat Decryption Violates Security Guidelines
Full sources, classification reasons and claim limits are on the finding page.
WKWebView payment bridge accepts payment_form_submit from untrusted subframes without frame validation
Full sources, classification reasons and claim limits are on the finding page.
Telegram iOS Web App bridge exposed to third-party iframes
Full sources, classification reasons and claim limits are on the finding page.
heap buffer over-read in TL deserialization from operator precedence bug
Full sources, classification reasons and claim limits are on the finding page.
Bluetooth: hci_event: move wake reason storage into validated event handlers
Full sources, classification reasons and claim limits are on the finding page.
tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
Full sources, classification reasons and claim limits are on the finding page.
Bluetooth: SMP: force responder MITM requirements before building the pairing response
Full sources, classification reasons and claim limits are on the finding page.
WebGPU presentation sizing hardening after integer-overflow report
Full sources, classification reasons and claim limits are on the finding page.
Push IPC observer path removed after bug 2022681 report
Full sources, classification reasons and claim limits are on the finding page.
[confighttp] Enforce max_request_body_size before snappy decompression
Full sources, classification reasons and claim limits are on the finding page.
docs: be explicit about artifact security
Full sources, classification reasons and claim limits are on the finding page.
Do not allow empty hashes for the Target role
Full sources, classification reasons and claim limits are on the finding page.
Validate healthcheck path configuration
Full sources, classification reasons and claim limits are on the finding page.
Reject absolute URL in healthcheck path configuration
Full sources, classification reasons and claim limits are on the finding page.
bound request-body reads in the machine map endpoint
Full sources, classification reasons and claim limits are on the finding page.
XDS debug endpoints to require authentication
Full sources, classification reasons and claim limits are on the finding page.
fix cross-namespace access in statusgen xds debug endpoints
Full sources, classification reasons and claim limits are on the finding page.
fix: reject certs with literal-IP CN and no SAN
Full sources, classification reasons and claim limits are on the finding page.
Fix CN fallback handling in name constraints checking
Full sources, classification reasons and claim limits are on the finding page.
hyperv/syndbg: check length returned by cpu_physical_memory_map()
Full sources, classification reasons and claim limits are on the finding page.
pin github actions versions
Full sources, classification reasons and claim limits are on the finding page.
Fix SHA pinning: use correct SHAs matching original action versions
Full sources, classification reasons and claim limits are on the finding page.
Pin GitHub Action references to commit SHAs
Full sources, classification reasons and claim limits are on the finding page.
chore: Updating action dependencies to pin to commit sha
Full sources, classification reasons and claim limits are on the finding page.
chore: Pinning aws-actions/configure-aws-credentials to commit sha
Full sources, classification reasons and claim limits are on the finding page.
Pin GitHub Actions to commit SHAs
Full sources, classification reasons and claim limits are on the finding page.
ci: remove latest from toolchain
Full sources, classification reasons and claim limits are on the finding page.
Fast-fail on incorrect MaxSpanID
Full sources, classification reasons and claim limits are on the finding page.
Update standard FS impl to write files with `0o600` permissions
Full sources, classification reasons and claim limits are on the finding page.
PST fail-closed + protobuf compatibility fix
Full sources, classification reasons and claim limits are on the finding page.
Fix RCE for canary exploit
Fixed in: public source commit; a separate fixed release is not established
Full sources, classification reasons and claim limits are on the finding page.
fix(permissions): check deny rules against resolved IPs to prevent numeric hostname bypass
Full sources, classification reasons and claim limits are on the finding page.
Ignore expireTimerVersion=0 messages
Fixed in: v8.5.0
Full sources, classification reasons and claim limits are on the finding page.
Fix 'use-after-free' or 'double-free' issues
Full sources, classification reasons and claim limits are on the finding page.
Fixed dead condition in EIP-712 calldata filtering code
Full sources, classification reasons and claim limits are on the finding page.
Fixed path traversal in bulk file download via filename sanitization.
Full sources, classification reasons and claim limits are on the finding page.
update to 12.6.2 (6655)
Full sources, classification reasons and claim limits are on the finding page.
update to 12.7.0 (6740)
Full sources, classification reasons and claim limits are on the finding page.
More strict checks in ffmpeg decodiing.
Full sources, classification reasons and claim limits are on the finding page.
Upgrade TDLib to tdlib/td@8fc2344
Full sources, classification reasons and claim limits are on the finding page.
Fix web
Full sources, classification reasons and claim limits are on the finding page.
Update tgcalls
Full sources, classification reasons and claim limits are on the finding page.
Update tgcalls
Full sources, classification reasons and claim limits are on the finding page.
TelegramApi: regenerate Api*/SecretApiLayer*.swift with safe flag unwrap
Full sources, classification reasons and claim limits are on the finding page.
Filter url
Full sources, classification reasons and claim limits are on the finding page.
feat: SCTP signaling improvements for reliable connection establishment
Full sources, classification reasons and claim limits are on the finding page.
More strict checks in ffmpeg decodiing.
Full sources, classification reasons and claim limits are on the finding page.
More strict checks in ffmpeg decodiing.
Full sources, classification reasons and claim limits are on the finding page.
restrict tg://iv decode to safe links
Full sources, classification reasons and claim limits are on the finding page.
Harden interaction app<->shell<->webapp.
Full sources, classification reasons and claim limits are on the finding page.
General: Better validation for iframe event origins (#6856)
Full sources, classification reasons and claim limits are on the finding page.
attest: fix uint32 underflow in parseEfiSignatureList
Full sources, classification reasons and claim limits are on the finding page.
Fix a potential buffer overflow in the animated PNG decoder when parsing malformed fdAT chunks
Full sources, classification reasons and claim limits are on the finding page.
upb: add bounds check to LocalizeRadix()
Full sources, classification reasons and claim limits are on the finding page.
bare LF accepted in chunked transfer encoding
Full sources, classification reasons and claim limits are on the finding page.
feat: make scheme configurable with default set to https
Full sources, classification reasons and claim limits are on the finding page.
chore: set default value of ssl_verify to true
Full sources, classification reasons and claim limits are on the finding page.
fix(flag): validate template file extension
Full sources, classification reasons and claim limits are on the finding page.
Validate tcg-kp-AIKCertificate EKU
Full sources, classification reasons and claim limits are on the finding page.
Validate webhooks
Full sources, classification reasons and claim limits are on the finding page.
jni: Avoid forming &mut when destroying a bridged handle
Full sources, classification reasons and claim limits are on the finding page.
tool:gpgtar: Check the output directory with --directory.
Full sources, classification reasons and claim limits are on the finding page.
add size limit handler to limit req/resp size (#4310) (#4313)
Full sources, classification reasons and claim limits are on the finding page.
Security Bulletin: NVIDIA TensorRT-LLM - May 2026
Full sources, classification reasons and claim limits are on the finding page.
chore: deploy Polygon_SpokePool
Full sources, classification reasons and claim limits are on the finding page.
pkg/authz: Reject requests exceeding body size limit
Full sources, classification reasons and claim limits are on the finding page.
rpcserver: Ensure limited user is always limited
Fixed in: dcrd v2.1.4 (release-v2.1.4)
Full sources, classification reasons and claim limits are on the finding page.
jsonrpc: Fix bugs in authenticate RPC.
Full sources, classification reasons and claim limits are on the finding page.
sanitize iframe bodyClasses and bodyStyles in getIframeHtml
Full sources, classification reasons and claim limits are on the finding page.
fix(passkeys): validate caller origin before signing WebAuthn assertions
Full sources, classification reasons and claim limits are on the finding page.
normalize trailing-dot DNS names before name-constraint matching
Fixed in: Java 1.85 and C# 2.7.0
Full sources, classification reasons and claim limits are on the finding page.
Don't extract bad files
Full sources, classification reasons and claim limits are on the finding page.
crypto/x509: Fix interaction of DNS exclude constraints with wildcard DNS names.
Full sources, classification reasons and claim limits are on the finding page.
crypto/x509: Tighten URI name constraints parsing and matching
Full sources, classification reasons and claim limits are on the finding page.
chore(core): improve handling of large messages
Full sources, classification reasons and claim limits are on the finding page.
feat(suite-desktop-core): add check for path traversal
Full sources, classification reasons and claim limits are on the finding page.
fix(core): use verifiers for translations syscalls
Full sources, classification reasons and claim limits are on the finding page.
fix(core): fix jpegdec syscall verifier
Full sources, classification reasons and claim limits are on the finding page.
fix(crypto): add missing memzero to `ed25519.c`
Full sources, classification reasons and claim limits are on the finding page.
fix(crypto): add missing memzero to `cardano.c`
Full sources, classification reasons and claim limits are on the finding page.
fix(crypto): add missing memzero to `ecdsa.c`
Full sources, classification reasons and claim limits are on the finding page.
fix(crypto): add missing memzero to `bip32.c`
Full sources, classification reasons and claim limits are on the finding page.
fix(rust/trezor-thp): check `payload_len` is not less than `CHECKSUM_LEN`
Full sources, classification reasons and claim limits are on the finding page.
fix(core): fix dma2d syscall verifiers
Full sources, classification reasons and claim limits are on the finding page.
fix(core): fix syscall set filter verifier
Full sources, classification reasons and claim limits are on the finding page.
refactor: stellar confirmations
Full sources, classification reasons and claim limits are on the finding page.
fix(core): fix bug in multisig verification.
Full sources, classification reasons and claim limits are on the finding page.
fix(crypto): Avoid caching uncacheable nodes in bip32.c
Full sources, classification reasons and claim limits are on the finding page.
fix(crypto): clean up stack in hdnode_deserialize()
Full sources, classification reasons and claim limits are on the finding page.
feat(connect-webextension): now uses externally_connectable api
Full sources, classification reasons and claim limits are on the finding page.
feat: enhance OAuth handling with zod validation and update response structure
Full sources, classification reasons and claim limits are on the finding page.
enhancement: reject oversized websocket messages
Full sources, classification reasons and claim limits are on the finding page.
enhancement: limit /api/sendtx body size
Full sources, classification reasons and claim limits are on the finding page.
fix: add validation for negative ranges
Full sources, classification reasons and claim limits are on the finding page.
enhancement: avoid template.JSStr
Full sources, classification reasons and claim limits are on the finding page.
Use env variable to read user input when mounting FSx volumes
Full sources, classification reasons and claim limits are on the finding page.
pinning github action dependencies to commit sha
Full sources, classification reasons and claim limits are on the finding page.
containment-check for targets_base_url in fetch_target
Full sources, classification reasons and claim limits are on the finding page.
compound delegation chain decomposed across CVE-2026-6966 and CVE-2026-6967
Full sources, classification reasons and claim limits are on the finding page.
Handle id-pkix-ocsp-nocheck in OCSP responder verification
Full sources, classification reasons and claim limits are on the finding page.
Fix SM2 signature forgery via missing t == 0 rejection in ippsGFpECVerifySM2
Full sources, classification reasons and claim limits are on the finding page.
fix(qcnl): fix integer overflow in write_callback() on Linux
Full sources, classification reasons and claim limits are on the finding page.
lib: [aes-cbc] fix zero-length message handling in decrypt direction
Full sources, classification reasons and claim limits are on the finding page.
download-artifact v8: content-type gated artifact decompression
Full sources, classification reasons and claim limits are on the finding page.
Bug fixes ported from 2026.1
Full sources, classification reasons and claim limits are on the finding page.
arm RLDP receiver timeouts and validate FEC before receiver allocation
Full sources, classification reasons and claim limits are on the finding page.
node/security-relevant fixes
Full sources, classification reasons and claim limits are on the finding page.
Fix empty collated data / Removing null-consensus
Full sources, classification reasons and claim limits are on the finding page.
fix SAN dNSName constraints matching
Full sources, classification reasons and claim limits are on the finding page.
mark ApkUpdatePackageInstallerReceiver non-exported
Full sources, classification reasons and claim limits are on the finding page.
validate pre-key key-id ranges
Full sources, classification reasons and claim limits are on the finding page.
uhv: use-after-free read in sanitizeHeadersWithUnderscores with duplicate underscore headers
Full sources, classification reasons and claim limits are on the finding page.
fix(wallet-api): add domain validation for customDappUrl
Full sources, classification reasons and claim limits are on the finding page.
Avoid content key packet verification fallback on publicly shared nodes
Full sources, classification reasons and claim limits are on the finding page.
verifyImages(required): enforce matching images after non-matching images
Full sources, classification reasons and claim limits are on the finding page.
sandbox Terraform filesystem functions
Full sources, classification reasons and claim limits are on the finding page.
ScanQrModal: fix domain check for cashlinks
Full sources, classification reasons and claim limits are on the finding page.
fix: webhook initialization order
Full sources, classification reasons and claim limits are on the finding page.
Updated to use the latest plugin SDK
Full sources, classification reasons and claim limits are on the finding page.
Farewell 'Device Bridge' in LLD (#2635)
Full sources, classification reasons and claim limits are on the finding page.
Track interactions in webview for clipboard access
Full sources, classification reasons and claim limits are on the finding page.
TDLib public change; vector-overflow fix mapping unconfirmed
Full sources, classification reasons and claim limits are on the finding page.
fix: register defers immediately in scan.go
Full sources, classification reasons and claim limits are on the finding page.
fix treewide: register more defers immediately
Full sources, classification reasons and claim limits are on the finding page.
fix: abstract out cpio operations to helper function
Full sources, classification reasons and claim limits are on the finding page.
asn1parse: add small ber/der edge-case seeds
Full sources, classification reasons and claim limits are on the finding page.
test: add ECDSA activation regression coverage
Full sources, classification reasons and claim limits are on the finding page.
signing-path integrity gate bypass via merkle preimage binding break
Fixed in: commit 0586ab2
Full sources, classification reasons and claim limits are on the finding page.
Recorded fields describe the portfolio mapping. Fields labelled upstream come from the linked advisory snapshot. Credit, release rollout and independent discovery are not inferred; omitted optional fields are not recorded.
Only CVEs confirmed PUBLISHED by the CVE registry count as CVEs. Reserved IDs stay pending. A published GHSA may count once as a GHSA while its CVE is pending; it does not add a second record.
Method, attribution rules, and what we do about silent fixes: disclosure policy. Long-form 1seal write-ups are listed on Advisories.