Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: akhilrex Clear all filters
TI-2026-65774 CVE-2026-104058 · GHSA-4wcx-j3g3-fcpv

Podgrab Missing Authentication on WebSocket /ws Endpoint

Priority LOW 34

Podgrab contains a missing authentication vulnerability in which the /ws WebSocket route is registered on the root gin engine instead of the BasicAuth-protected router group, allowing unauthenticated network clients to c…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00237 Published 2026-10-01 No fix listed CWE-306
TI-2026-65773 CVE-2026-104057 · GHSA-mg2r-35f6-8r8h

Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler

Priority MEDIUM 43

Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections) in its WebSocket handler, where Wshandler and HandleWebsock…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00265 Published 2026-10-01 No fix listed CWE-362