tag
Go
High
ProFTPD mod_sql Pre-Auth SQL Injection Leading to RCE (CVE-2026-42167)
CVE-2026-42167·
ProFTPD (with mod_sql and SQL-backed logging configured)
patched
Medium
PocketBase OAuth2 Account Pre-Hijacking (CVE-2026-44166)
CVE-2026-44166 / [GHSA-pq7p-mc74-g65w](https://github.com/pocketbase/pocketbase/security/advisories/GHSA-pq7p-mc74-g65w)·
[PocketBase](https://github.com/pocketbase/pocketbase) (Go backend / BaaS)
unpatched
High
Gogs Wiki Arbitrary File Deletion via Path Traversal (CVE-2026-24135)
CVE-2026-24135 (GHSA-jp7c-wj6q-3qf2)·
Gogs self-hosted Git service
patched