Search Vulnerabilities

etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema

etcd: Watch API authorization bypass via open-ended range requests

Oh My Posh: Arbitrary command execution via template injection in the path segment

Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search

OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal

Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests

frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources

Cloudreve WOPI view sessions can write files and WOPI access token secret is ignored

webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules

Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials

Cloudreve: Broken Access Control in file event stream: a single-file share recipient is subscribed to the owner's parent folder and receives activi...

Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server

Cloudreve: Information Exposure in `GET /api/v4/user/search`: `SearchActive` omits the active-status predicate, leaking inactive/banned account emails

Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account

kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag