Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/schollz/croc
Go
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive
CVE-2026-119298 · GHSA-X89H-7H96-V88F
github.com/schollz/croc/v10
github.com/schollz/croc/v11
Go
Medium
Fix reported
2026-11-10
Croc sender may send dangerous new files to receiver
CVE-2023-43619 · GHSA-PPJH-XP5V-46WC
Version ranges need review.
github.com/schollz/croc/v6
github.com/schollz/croc/v8
Go
High
Fix reported
2026-09-10
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device
CVE-2023-43620 · GHSA-364C-VVQX-446C
Version ranges need review.
github.com/schollz/croc/v6
github.com/schollz/croc/v8
Go
High
Fix reported
2026-09-10
Cros secrets may be disclosed to untrusted relay
CVE-2023-43617 · GHSA-HP56-XVF4-G6WR
Version ranges need review.
github.com/schollz/croc/v6
github.com/schollz/croc/v8
Go
Medium
Fix reported
2026-09-10
Sender can cause a receiver to overwrite files during ZIP extraction in Croc
CVE-2023-43616 · GHSA-8C8W-F7WP-2JR2
Version ranges need review.
github.com/schollz/croc/v6
github.com/schollz/croc/v8
Go
Medium
Fix reported
2026-09-10
Croc requires senders to provide local IP addresses in cleartext
CVE-2023-43618 · GHSA-7MP6-929P-PQHJ
Version ranges need review.
github.com/schollz/croc/v6
github.com/schollz/croc/v8
Go
Medium
Fix reported
2026-09-10
Croc may expose secret to local users
CVE-2023-43621 · GHSA-7G3V-4GGR-XVJF
Version ranges need review.
github.com/schollz/croc/v6
github.com/schollz/croc/v8
Go
Medium
Fix reported
2026-09-10
