Go - OSV

GHSA-j6qf-3m9c-vwj3

Go/github.com/go-chi/chi/v5

chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For yesterday

Fix available
Severity - 4.8 (Medium)

GHSA-h53f-rm2w-w7rg

Go/github.com/labstack/echo/v5

Echo: X-Real-IP extractor trusts the header value instead of the sending peer yesterday

Fix available
Severity - 5.3 (Medium)

GHSA-9969-6676-49h5

Go/github.com/labstack/echo/v4
Go/github.com/labstack/echo/v5

Echo: WebSocket proxy can retain connections and handlers after client... yesterday

Fix available
Severity - 8.2 (High)

GHSA-h7wr-284f-5qvc

Go/github.com/labstack/echo/v4

Echo: Decompress permits unbounded gzip expansion in v4 yesterday

Fix available
Severity - 8.2 (High)

GHSA-cxf3-9h37-7rr8

Go/github.com/labstack/echo/v4
Go/github.com/labstack/echo/v5

Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls yesterday

Fix available
Severity - 9.1 (Critical)

GHSA-x9ff-22gv-65f4

Go/github.com/labstack/echo/v5

Echo: BodyDump can discard BodyLimit overflow errors for unknown-length... yesterday

Fix available
Severity - 6.3 (Medium)

GHSA-f48p-c9v4-h7xv

Go/github.com/labstack/echo/v4

Echo: BodyDump captures request and response bodies without size limits in v4 yesterday

Fix available
Severity - 8.2 (High)

GHSA-rpx2-p6hp-x5gj

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: Missing consistency check between packageName and repoURL/repoHash in... yesterday

Fix available
Severity - 6.6 (Medium)

GHSA-c8w8-3pqp-wr83

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: A parser differential between the WebSocket keepalive exemption and the... yesterday

Fix available
Severity - 7.5 (High)

GHSA-4pjg-x8qj-33j5

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from... yesterday

Fix available
Severity - 5.8 (Medium)

GHSA-p4qw-vx5p-g984

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: The publish filter for database backlinks consults the forbidden list... yesterday

Fix available
Severity - 5.8 (Medium)

GHSA-xp3q-r38w-vgqm

Go/github.com/siyuan-note/siyuan/kernel

SiYuan: The publish filter for local storage returns the administrator's entire... yesterday

Fix available
Severity - 5.8 (Medium)

GHSA-46r4-q7wv-32fc

Go/github.com/openchoreo/openchoreo

OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project... 3 days ago

Fix available
Severity - 7.4 (High)

GHSA-5588-rp99-5fjh

Go/github.com/moov-io/signedxml

Moov signedxml: Unauthenticated denial of service in exclusive XML... 3 days ago

Fix available
Severity - 7.5 (High)

GO-2026-6809

Go/stdlib

Distrust compromised intermediate certificates in crypto/x509 4 days ago

Fix available

GHSA-259r-337f-4rfw

Go/github.com/klauspost/compress

Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress 4 days ago

Fix available
Severity - 7.5 (High)

Vulnerabilities