CRITICAL9.1Go
GHSA-3gv2-v3jx-r9fh· CVE-2025-53632, GO-2025-3808Chall-Manager is vulnerable to Path Traversal when extracting/decoding a zip archive
Modified: 8/14/2025
package
Go/github.com/ctfer-io/chall-manager
pkg:go/github.com/ctfer-io/chall-manager
HIGH7.5Go
GHSA-ggmv-j932-q89q· CVE-2025-53634, GO-2025-3809Chall-Manager's HTTP Gateway is vulnerable to DoS due to missing header timeout
Modified: 8/14/2025
HIGHGo
GHSA-r7fm-3pqm-ww5w· CVE-2025-53633, GO-2025-3810Chall-Manager's scenario decoding process does not check for zip bombs
Modified: 7/28/2025
—Go
GO-2025-3808· CVE-2025-53632, GHSA-3gv2-v3jx-r9fhChall-Manager is vulnerable to Path Traversal when extracting/decoding a zip archive in github.com/ctfer-io/chall-manager
Modified: 3/3/2026
—Go
GO-2025-3809· CVE-2025-53634, GHSA-ggmv-j932-q89qChall-Manager's HTTP Gateway is vulnerable to DoS due to missing header timeout in github.com/ctfer-io/chall-manager
Modified: 3/3/2026
—Go
GO-2025-3810· CVE-2025-53633, GHSA-r7fm-3pqm-ww5wChall-Manager's scenario decoding process does not check for zip bombs in github.com/ctfer-io/chall-manager
Modified: 3/3/2026