cve.nowby Sazabi

GoPackage

github.com/ctfer-io/chall-manager

3 known vulnerabilities (3 high), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 3 · 3 high

Registry: pkg.go.dev

Advisories 3

CVE-2025-53634High 8.7
Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks
Affected: fixed in 0.1.4.
CVE-2025-53633High 8.7
Chall-Manager's scenario decoding process does not check for zip bombs
Affected: fixed in 0.1.4.
CVE-2025-53632High 8.8
Chall-Manager's scenario decoding process does not check for zip slips
Affected: fixed in 0.1.4.