github.com/basekick-labs/arc
Go · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735 | github.com/basekick-labs/arc | Go | متوسط | اصلاح گزارش شده | |
| Arc has unauthenticated application log disclosure via `/api/v1/logs` | github.com/basekick-labs/arc | Go | کم | اصلاح گزارش شده | |
| arc has unauthenticated cluster node admission when `cluster.shared_secret` is unset | github.com/basekick-labs/arc | Go | متوسط | اصلاح گزارش شده | |
| Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS | github.com/basekick-labs/arc | Go | زیاد | اصلاح گزارش شده | |
| Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks | github.com/basekick-labs/arc | Go | زیاد | اصلاح گزارش شده |