MEDIUM6.5Go
GHSA-2286-hxv5-cmp2· CVE-2026-25760, GO-2026-4445Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated)
Modified: 2/19/2026
package
Go/github.com/bishopfox/sliver
pkg:go/github.com/bishopfox/sliver
HIGHGo
GHSA-2phg-qgmm-r638· GO-2026-4548Sliver has Potential Zip Bomb Denial of Service in GzipEncoder
Modified: 2/28/2026
MEDIUMGo
GHSA-6fpf-248c-m7wm· CVE-2026-34227, GO-2026-5175Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface
Modified: 6/25/2026
HIGH8.1Go
GHSA-8jxm-xp43-qh3q· CVE-2023-34758, CVE-2023-35170Silver vulnerable to MitM attack against implants due to a cryptography vulnerability
Modified: 7/8/2026
MEDIUMGo
GHSA-97vp-pwqj-46qc· CVE-2026-32941, GO-2026-4723Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports
Modified: 3/30/2026
HIGHGo
GHSA-c279-989m-238f· GO-2026-4899Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted
Modified: 4/2/2026
MEDIUMGo
GHSA-fh4v-v779-4g2w· CVE-2025-27090, GO-2025-3472SSRF in sliver teamserver
Modified: 3/3/2025
HIGH8.8Go
GHSA-hc5w-gxxr-w8x8· CVE-2024-41111, GO-2024-2993Sliver Allows Authenticated Operator-to-Server Remote Code Execution
Modified: 9/10/2026
MEDIUMGo
GHSA-hjr9-wj7v-7hv8· GO-2026-4280Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass
Modified: 2/3/2026
LOWGo
GHSA-hx52-cv84-jr5v· CVE-2026-29781, GO-2026-4609Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers
Modified: 3/23/2026
MEDIUM6.3Go
GHSA-q8j9-34qf-7vq7· CVE-2025-27093, GO-2025-4079Silver has unrestricted traffic between Wireguard clients
Modified: 11/5/2025
HIGH7.5Go
GHSA-wxrw-gvg8-fqjp· CVE-2026-25791, GO-2026-4466Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service
Modified: 2/19/2026
—Go
GO-2023-1866· CVE-2023-34758, CVE-2023-35170Silver vulnerable to MitM attack against implants due to a cryptography vulnerability in github.com/bishopfox/sliver
Modified: 3/3/2026
—Go
GO-2024-2993· CVE-2024-41111, GHSA-hc5w-gxxr-w8x8Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver
Modified: 8/19/2024
—Go
GO-2025-3472· CVE-2025-27090, GHSA-fh4v-v779-4g2wSSRF in sliver teamserver in github.com/bishopfox/sliver
Modified: 3/3/2026
—Go
GO-2025-4079· CVE-2025-27093, GHSA-q8j9-34qf-7vq7Silver has unrestricted traffic between Wireguard clients in github.com/bishopfox/sliver
Modified: 3/3/2026
—Go
GO-2026-4280· GHSA-hjr9-wj7v-7hv8Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver
Modified: 3/3/2026
—Go
GO-2026-4445· CVE-2026-25760, GHSA-2286-hxv5-cmp2Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
Modified: 2/19/2026
—Go
GO-2026-4466· CVE-2026-25791, GHSA-wxrw-gvg8-fqjpSliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver
Modified: 2/19/2026
—Go
GO-2026-4548· GHSA-2phg-qgmm-r638Sliver has Potential Zip Bomb Denial of Service in GzipEncoder in github.com/bishopfox/sliver
Modified: 2/25/2026
—Go
GO-2026-4609· CVE-2026-29781, GHSA-hx52-cv84-jr5vSliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver
Modified: 3/23/2026
—Go
GO-2026-4723· CVE-2026-32941, GHSA-97vp-pwqj-46qcSliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver
Modified: 3/26/2026
—Go
GO-2026-4899· GHSA-c279-989m-238fSliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopfox/sliver
Modified: 4/2/2026
—Go
GO-2026-5175· CVE-2026-34227, GHSA-6fpf-248c-m7wmSliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface in github.com/bishopfox/sliver
Modified: 6/25/2026