zhenorzz

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

zhenorzz records in CISA KEV

No zhenorzz vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-38624 CVE-2026-53553 · GHSA-4g5x-hcwm-82jw

Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

HIGH 67

Goploy is an open-source automation deployment system.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00465 Published 2026-08-31 Fixed in 1.18.0 CWE-200

TI-2026-38623 CVE-2026-53552 · GHSA-26rh-24rg-j3vv

Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers

MEDIUM 43

Goploy is an open-source automation deployment system.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.0035 Published 2026-08-31 Fixed in 1.18.0 CWE-639

TI-2026-79255 CVE-2026-114665 · GHSA-q5pp-jrgg-4fpm

Symlink following in Goploy lets members read arbitrary files

LOW 31

Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00353 Published 2026-10-22 Fixed in 1.18.1 CWE-59

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0