Repository navigation
Security: danmestas/go-libfossil
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Sync client follows a redirect from HTTPS to plain HTTPGHSA-3f8x-8fr5-mr98 published
Oct 11, 2026 by danmestasLow -
Sync server sends artifact and unversioned content to requesters without read permissionGHSA-mvx3-6793-8x4r published
Oct 11, 2026 by danmestasModerate -
SQL injection through table-sync row keys from a sync peerGHSA-9fq6-h6xw-274g published
Oct 11, 2026 by danmestasHigh -
New repositories grant the anonymous nobody user push and Setup capabilitiesGHSA-44p2-whvx-9gwq published
Oct 11, 2026 by danmestasHigh -
Malformed sync messages from a peer panic or exhaust the client or serverGHSA-j99p-mw22-69c8 published
Oct 11, 2026 by danmestasModerate -
Sync server returns any config row to reqconfig without a capability checkGHSA-p6w4-4xqc-jhq2 published
Oct 11, 2026 by danmestasModerate -
Sync server accepts a replayed login card with any request bodyGHSA-2g5p-q5f3-477p published
Oct 11, 2026 by danmestasHigh
Learn more about advisories related to danmestas/go-libfossil in the GitHub Advisory Database