Skip to content
OpenAdvisories

Package · Go

codefloe.com/crowci/crow/v6

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GO-2026-6216

    Cross-forge account takeover on login in codefloe.com/crowci/crow/v6

    In codefloe.com/crowci/crow/v6 before 6.4.0, user account lookup during forge login is not scoped to the authenticating forge. An account on one forge matches an existing user on another forge via forge remote ID collision or username collision. On instances …

    codefloe.com/crowci/crow/v6 Go