Advisory Catalog

Reset context tracking on consecutive template expressions in html/template

Recognize yield as regexp preceder keyword in html/template

Reject malformed ECH outer extension references in crypto/tls

HTTP/2 server crash due to HPACK encoder race in net/http

amqp091-go: Pre-negotiation frame limit is not enforced to 4KB

Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic

Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor

Coraza: URL-encoded form Content-Type parameters bypass Coraza body inspection

Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion

Coraza: Multipart filename* (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules

Coraza has Cookie Parser Confusion

Coraza: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations

Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass

Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)

Coraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspection

Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days

Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element

Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks

Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS

Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows

Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics

Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref

Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process

Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml

Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields

External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration

SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)

SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/*

gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled

SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)

SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)

SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers

SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass

Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks

Anubis: Policy bypass via client controlled X-Original-URI header

SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block