HIGH7.5Go
GHSA-2g4x-fq3j-cgq4· CVE-2026-45090, GO-2026-4999Dalfox has an Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode)
Modified: 6/8/2026
package
Go/github.com/hahwul/dalfox
pkg:go/github.com/hahwul/dalfox
—Go
GO-2026-4999· CVE-2026-45090, GHSA-2g4x-fq3j-cgq4Dalfox has an Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode) in github.com/hahwul/dalfox
Modified: 5/20/2026
—Go
GO-2026-5070· CVE-2026-45088, GHSA-35wr-x7v6-9fv2Dalfox Server Mode has an Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in github.com/hahwul/dalfox
Modified: 6/25/2026
—Go
GO-2026-5257· CVE-2026-45089, GHSA-8hf9-3q64-q2qfDalfox Server Mode has an Unauthenticated Arbitrary File Create/Append via `output` Option in github.com/hahwul/dalfox
Modified: 6/25/2026
—Go
GO-2026-5649· CVE-2026-45087, GHSA-v25v-m36w-jp4hDalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action` in github.com/hahwul/dalfox
Modified: 6/25/2026