MEDIUM6.8Go
GHSA-2v93-vp82-cjv8· CVE-2026-6863, GO-2026-4997Velocidex Velociraptor has an Incorrect Authorization issue
Modified: 5/20/2026
package
Go/www.velocidex.com/golang/velociraptor
pkg:go/www.velocidex.com/golang/velociraptor
MEDIUM5.0Go
GHSA-3c93-g9g6-p5j4· CVE-2026-7573, GO-2026-5078Velocidex Velociraptor has an authorization bypass vulnerability
Modified: 6/25/2026
MEDIUM4.4Go
GHSA-6cmp-qv2f-x97x· CVE-2026-7572, GO-2026-5174Velocidex Velociraptor has an off-by-one error
Modified: 6/25/2026
MEDIUM4.3Go
GHSA-7jf5-fvgf-48c6· CVE-2023-0290, GO-2023-1502Velociraptor subject to Path Traversal
Modified: 8/20/2024
HIGH8.8Go
GHSA-g5vm-525q-r66c· CVE-2023-0242, GO-2023-1527Velociraptor vulnerable to Missing Authorization
Modified: 8/20/2024
MEDIUM4.7Go
GHSA-gpfc-mph4-qm24· CVE-2025-6264, GO-2025-3768Velociraptor vulnerable to privilege escalation via UpdateConfig artifact
Modified: 10/13/2025
CRITICAL9.1Go
GHSA-hv5g-26jg-pc45· CVE-2026-6290, GO-2026-5438Velociraptor vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token
Modified: 6/25/2026
—Go
GO-2023-1502· CVE-2023-0290, GHSA-7jf5-fvgf-48c6Velociraptor subject to Path Traversal in www.velocidex.com/golang/velociraptor
Modified: 3/3/2026
—Go
GO-2023-1527· CVE-2023-0242, GHSA-g5vm-525q-r66cVelociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor
Modified: 3/3/2026
—Go
GO-2025-3768· CVE-2025-6264, GHSA-gpfc-mph4-qm24Velociraptor vulnerable to privilege escalation via UpdateConfig artifact in www.velocidex.com/golang/velociraptor
Modified: 3/3/2026
—Go
GO-2026-4997· CVE-2026-6863, GHSA-2v93-vp82-cjv8Velocidex Velociraptor has an Incorrect Authorization issue in www.velocidex.com/golang/velociraptor
Modified: 5/20/2026
—Go
GO-2026-5078· CVE-2026-7573, GHSA-3c93-g9g6-p5j4Velocidex Velociraptor has an authorization bypass vulnerability in www.velocidex.com/golang/velociraptor
Modified: 6/25/2026
—Go
GO-2026-5174· CVE-2026-7572, GHSA-6cmp-qv2f-x97xVelocidex Velociraptor has an off-by-one error in www.velocidex.com/golang/velociraptor
Modified: 6/25/2026
—Go
GO-2026-5438· CVE-2026-6290, GHSA-hv5g-26jg-pc45Velociraptor vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token in www.velocidex.com/golang/velociraptor
Modified: 6/25/2026