govulncheck-vulndb vulnerabilities (SUSE)
687 vulnerabilities.
govulncheck-vulndbSUSEfrp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow8.7 Highgovulncheck-vulndbSUSECloudreve: Unauthorized file write via WOPI view sessions whose access token secret is ignored6.3 Mediumgovulncheck-vulndbSUSEwebtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules5.3 Mediumgovulncheck-vulndbSUSECloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials7.1 Highgovulncheck-vulndbSUSECloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients4.3 Mediumgovulncheck-vulndbSUSECloudreve: Server crash through image decompression/pixel bomb in thumbnail & avatar decoding (DoS)6.5 Mediumgovulncheck-vulndbSUSECloudreve: Inactive/banned account emails leaked via GET /api/v4/user/search because SearchActive() omits the active-status predicate4.3 Mediumgovulncheck-vulndbSUSECloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account4.3 Mediumgovulncheck-vulndbSUSETraefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass5.3 Mediumgovulncheck-vulndbSUSETraefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef5.3 Mediumgovulncheck-vulndbSUSETraefik before v2.11.52 Authentication Bypass via ReplacePathRegex7.8 Highgovulncheck-vulndbSUSEGHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private4.3 Mediumgovulncheck-vulndbSUSEPublic-only API token restriction is not enforced on team API routes4.3 Mediumgovulncheck-vulndbSUSEPrivate org member list leaked via /members API endpoint — incomplete fix for PR #381457.5 Highgovulncheck-vulndbSUSEOAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)8.1 Highgovulncheck-vulndbSUSEGitea LFS Deploy-Key Privilege Escalation5.4 Mediumgovulncheck-vulndbSUSENull Pointer Dereference in AddTime API Causes Authenticated Denial of Service2.7 Lowgovulncheck-vulndbSUSEOIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes9.1 Criticalgovulncheck-vulndbSUSEPrivate Repository Metadata Remains Accessible After Access Revocation7.5 Highgovulncheck-vulndbSUSEREST API exposes organization membership of private organizations to public7.5 Highgovulncheck-vulndbSUSEDenial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint6.5 Mediumgovulncheck-vulndbSUSECross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API2.7 Lowgovulncheck-vulndbSUSEPublic-only repository tokens can update private PR head branches9.1 Criticalgovulncheck-vulndbSUSERepository migration SSRF via multi-answer DNS allow-list bypass6.5 Mediumgovulncheck-vulndbSUSESSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL6.3 Mediumgovulncheck-vulndbSUSECross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access7.5 Highgovulncheck-vulndbSUSEPrivate Repository Existence Disclosure via go-get Meta Endpoint5.3 Mediumgovulncheck-vulndbSUSEBlind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim3.1 Lowgovulncheck-vulndbSUSEOAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)4.3 Mediumgovulncheck-vulndbSUSEGitea Remember-Me Token Theft Not Invalidating Attacker Session9.1 Criticalgovulncheck-vulndbSUSEMissing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in c…5.9 Mediumgovulncheck-vulndbSUSEBranch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag8.1 Highgovulncheck-vulndbSUSEGitea private repository metadata disclosure after access revocation4.3 Mediumgovulncheck-vulndbSUSEFileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files7.7 Highgovulncheck-vulndbSUSEArgo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing8.9 Highgovulncheck-vulndbSUSEdd-trace-go: Improper parsing of W3C baggage headers may lead to DoS7.5 Highgovulncheck-vulndbSUSECilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match5.4 Mediumgovulncheck-vulndbSUSECloudreve: Path Traversal / Broken Access Control in Cloudreve WebDAV (`/dav`) — scoped DAV credential escapes its configured account root7.1 Highgovulncheck-vulndbSUSEInfinite loop on invalid input in golang.org/x/text7.5 Highgovulncheck-vulndbSUSEParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5 Highgovulncheck-vulndbSUSEZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange8.1 Highgovulncheck-vulndbSUSEZITADEL: Auto-linking by email: IdP-side email verification is not checked4.8 Mediumgovulncheck-vulndbSUSEZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider4.2 Mediumgovulncheck-vulndbSUSEExcelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)7.5 Highgovulncheck-vulndbSUSEExcelize: Negative shared-string index causes panic in GetCellValue and GetRows6.9 Mediumgovulncheck-vulndbSUSEExcelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation8.7 Highgovulncheck-vulndbSUSELima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket8.2 Highgovulncheck-vulndbSUSEGoBGP confederation validation panics on empty AS_PATH attribute5.9 Mediumgovulncheck-vulndbSUSEGoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries5.9 Mediumgovulncheck-vulndbSUSESiYuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db7.7 High- Show moreLoading…