All products

github.com/ctfer-io/chall-manager

Go · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Chall-Manager's HTTP Gateway is vulnerable to DoS due to missing header timeoutCVE-2025-53634 · GHSA-GGMV-J932-Q89QVersion ranges need review. github.com/ctfer-io/chall-manager Go High Fix reported
Chall-Manager's scenario decoding process does not check for zip bombsCVE-2025-53633 · GHSA-R7FM-3PQM-WW5WVersion ranges need review. github.com/ctfer-io/chall-manager Go High Fix reported
Chall-Manager is vulnerable to Path Traversal when extracting/decoding a zip archiveCVE-2025-53632 · GHSA-3GV2-V3JX-R9FHVersion ranges need review. github.com/ctfer-io/chall-manager Go High Fix reported