PL
Product
plug
4
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 1
Watch
Add plug to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-56814 | 6.9 | Jul 10 | Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service) Affected: 1.4.0-rc.0 before 1.16.6; 1.17.0 before 1.17.4; 1.18.0 before 1.18.5; 1.19.1 before 1.19.5; 1.20.0 before 1.20.3; c52b2f32c90bccd718202bafccb5f95594e30183 |
| CVE-2026-105963 New | 5.1 | Oct 23 | Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments Affected: 1.6.3 before 1.7.0; 56000c33d8a0a2fbac491f8be06b9c5112bc2276 |
Showing 2