Security
فارسی
All products

github.com/bishopfox/sliver

Go · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG DecoderCVE-2026-77622 · GHSA-663M-7X7M-G4FW github.com/BishopFox/slivergithub.com/bishopfox/sliver Go High Fix reported
Sliver Allows Authenticated Operator-to-Server Remote Code ExecutionCVE-2024-41111 · GHSA-HC5W-GXXR-W8X8Version ranges need review. github.com/bishopfox/sliver Go High Fix reported
Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP InterfaceCVE-2026-34227 · GHSA-6FPF-248C-M7WMVersion ranges need review. github.com/bishopfox/sliver Go Medium Fix reported
Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attemptedGHSA-C279-989M-238F · GO-2026-4899Version ranges need review. github.com/bishopfox/sliver Go High No fix reported
Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard TransportsCVE-2026-32941 · GHSA-97VP-PWQJ-46QCVersion ranges need review. github.com/bishopfox/sliver Go Medium No fix reported
Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its HandlersCVE-2026-29781 · GHSA-HX52-CV84-JR5VVersion ranges need review. github.com/bishopfox/sliver Go Low No fix reported
Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder BypassGHSA-HJR9-WJ7V-7HV8 · GO-2026-4280Version ranges need review. github.com/bishopfox/sliver Go Medium No fix reported
Silver has unrestricted traffic between Wireguard clientsCVE-2025-27093 · GHSA-Q8J9-34QF-7VQ7Version ranges need review. github.com/BishopFox/slivergithub.com/bishopfox/sliver Go Medium Fix reported
SSRF in sliver teamserverCVE-2025-27090 · GHSA-FH4V-V779-4G2WVersion ranges need review. github.com/bishopfox/sliver Go Medium Fix reported
Sliver has Potential Zip Bomb Denial of Service in GzipEncoderGHSA-2PHG-QGMM-R638 · GO-2026-4548 github.com/BishopFox/slivergithub.com/bishopfox/sliver Go High Fix reported
Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of ServiceCVE-2026-25791 · GHSA-WXRW-GVG8-FQJPVersion ranges need review. github.com/bishopfox/sliver Go High Fix reported
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated)CVE-2026-25760 · GHSA-2286-HXV5-CMP2Version ranges need review. github.com/bishopfox/sliver Go Medium Fix reported
Silver vulnerable to MitM attack against implants due to a cryptography vulnerabilityCVE-2023-34758 · GHSA-8JXM-XP43-QH3Q github.com/bishopfox/sliver Go Critical Fix reported