Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Cleartext Storage of Sensitive InformationCVE-2026-55997
Affects github.com/rancher/rancher/pkg/api/norman/customization/clusterregistrationtokens | Versions >=2.13.0-alpha1 <2.13.8-alpha2>=2.14.0-alpha1 <2.14.4-alpha2
Has fix
GoPublished 9 Aug 2026
  • C
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2026-44945
Affects github.com/rancher/rancher/pkg/auth/requests/sar | Versions >=2.11.0-alpha1 <2.11.16-alpha2>=2.12.0-alpha1 <2.12.12-alpha2>=2.13.0-alpha1 <2.13.8-alpha2>=2.14.0-alpha1 <2.14.2-alpha2>=2.15.0-alpha1 <2.15.0-alpha18
Has fix
GoPublished 9 Aug 2026
  • C
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2026-44945
Affects github.com/rancher/rancher/pkg/auth/requests | Versions >=2.11.0-alpha1 <2.11.16-alpha2>=2.12.0-alpha1 <2.12.12-alpha2>=2.13.0-alpha1 <2.13.8-alpha2>=2.14.0-alpha1 <2.14.2-alpha2>=2.15.0-alpha1 <2.15.0-alpha18
Has fix
GoPublished 9 Aug 2026
  • C
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2026-44945
Affects github.com/rancher/rancher/pkg/clusterrouter | Versions >=2.11.0-alpha1 <2.11.16-alpha2>=2.12.0-alpha1 <2.12.12-alpha2>=2.13.0-alpha1 <2.13.8-alpha2>=2.14.0-alpha1 <2.14.2-alpha2>=2.15.0-alpha1 <2.15.0-alpha18
Has fix
GoPublished 9 Aug 2026
  • C
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2026-44945
Affects github.com/rancher/rancher/pkg/clusterrouter/proxy | Versions >=2.11.0-alpha1 <2.11.16-alpha2>=2.12.0-alpha1 <2.12.12-alpha2>=2.13.0-alpha1 <2.13.8-alpha2>=2.14.0-alpha1 <2.14.2-alpha2>=2.15.0-alpha1 <2.15.0-alpha18
Has fix
GoPublished 9 Aug 2026
  • C
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2026-44945
Affects github.com/rancher/rancher/pkg/multiclustermanager | Versions >=2.11.0-alpha1 <2.11.16-alpha2>=2.12.0-alpha1 <2.12.12-alpha2>=2.13.0-alpha1 <2.13.8-alpha2>=2.14.0-alpha1 <2.14.2-alpha2>=2.15.0-alpha1 <2.15.0-alpha18
Has fix
GoPublished 9 Aug 2026
  • H
Directory TraversalCVE-2026-71557
Affects github.com/go-git/go-git/v5/plumbing | Versions <5.19.2
Has fix
GoPublished 8 Aug 2026
  • H
Directory TraversalCVE-2026-71557
Affects github.com/go-git/go-git/v6/plumbing | Versions <6.0.0-alpha.5
Has fix
GoPublished 8 Aug 2026
  • H
Directory TraversalCVE-2026-71557
Affects github.com/go-git/go-git/plumbing | Versions >=0.0.0
Has fix
GoPublished 8 Aug 2026
  • H
Directory TraversalCVE-2026-71557
Affects github.com/go-git/go-git/storage/filesystem/dotgit | Versions >=0.0.0
Has fix
GoPublished 8 Aug 2026
  • H
Directory TraversalCVE-2026-71557
Affects github.com/go-git/go-git/v5/storage/filesystem/dotgit | Versions <5.19.2
Has fix
GoPublished 8 Aug 2026
  • H
Directory TraversalCVE-2026-71557
Affects github.com/go-git/go-git/v6/storage/filesystem/dotgit | Versions <6.0.0-alpha.5
Has fix
GoPublished 8 Aug 2026
  • M
Improper NeutralizationCVE-2026-64654
Affects github.com/cli/cli/v2/pkg | Versions <2.97.0
Has fix
GoPublished 8 Aug 2026
  • M
Improper NeutralizationCVE-2026-64654
Affects github.com/cli/cli/pkg/cmd/codespace | Versions >=0.0.0
Has fix
GoPublished 8 Aug 2026
  • L
Directory TraversalCVE-2026-64653
Affects github.com/cli/cli/v2/internal | Versions <2.97.0
Has fix
GoPublished 8 Aug 2026
  • L
Directory TraversalCVE-2026-64653
Affects github.com/cli/cli/v2/pkg | Versions <2.97.0
Has fix
GoPublished 8 Aug 2026
  • L
Directory TraversalCVE-2026-64653
Affects github.com/cli/cli/v2/api | Versions <2.97.0
Has fix
GoPublished 8 Aug 2026
  • L
Directory TraversalCVE-2026-64653
Affects github.com/cli/cli/api | Versions >=0.0.0
Has fix
GoPublished 8 Aug 2026
  • L
Directory TraversalCVE-2026-64653
Affects github.com/cli/cli/internal | Versions <2.97.0
Has fix
GoPublished 8 Aug 2026
  • L
Directory TraversalCVE-2026-64653
Affects github.com/cli/cli/pkg/cmdutil | Versions >=0.0.0
Has fix
GoPublished 8 Aug 2026
  • M
Insertion of Sensitive Information Into Sent DataCVE-2026-64652
Affects github.com/cli/cli/v2/pkg/cmd/auth/status | Versions <2.97.0
Has fix
GoPublished 8 Aug 2026
  • M
Insertion of Sensitive Information Into Sent DataCVE-2026-64652
Affects github.com/cli/cli/pkg/cmd/auth/status | Versions <2.97.0
Has fix
GoPublished 8 Aug 2026
  • H
Directory TraversalCVE-2026-65600
Affects github.com/traefik/traefik/v3/pkg/middlewares/replacepathregex | Versions >=3.6.0 <3.6.23>=3.7.0 <3.7.7
Has fix
GoPublished 3 Aug 2026
  • H
Directory TraversalCVE-2026-65600
Affects github.com/traefik/traefik/v2/pkg/middlewares/replacepathregex | Versions <2.11.52
Has fix
GoPublished 3 Aug 2026
  • H
Directory TraversalCVE-2026-65600
Affects github.com/traefik/traefik/pkg/middlewares/replacepathregex | Versions <2.11.52>=3.6.0 <3.6.23>=3.7.0 <3.7.7
Has fix
GoPublished 3 Aug 2026
  • L
Use of a Key Past its Expiration DateCVE-2026-54787
Affects github.com/sigstore/sigstore-go/pkg/verify | Versions <1.2.1
Has fix
GoPublished 2 Aug 2026
  • M
Symlink AttackCVE-2026-13723
Affects github.com/develar/app-builder/pkg/archive/zipx | Versions >=0.0.0
Has fix
GoPublished 2 Aug 2026
  • M
Symlink AttackCVE-2026-13723
Affects github.com/develar/app-builder/pkg/fs | Versions >=0.0.0
Has fix
GoPublished 2 Aug 2026
  • H
Improper Restriction of Security Token AssignmentCVE-2026-54593
Affects github.com/pterodactyl/wings/router/websocket | Versions <1.12.2
Has fix
GoPublished 29 Jul 2026
  • H
Improper Restriction of Security Token AssignmentCVE-2026-54593
Affects github.com/pterodactyl/wings/router/tokens | Versions <1.12.2
Has fix
GoPublished 29 Jul 2026