Skip to content
OpenAdvisories

Package · Go

github.com/ultravioletrs/cocos

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-119345

    Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

    Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attache…

    ultravioletrs cocos github.com/ultravioletrs/cocos Go