Skip to content
OpenAdvisories

Vendor

schollz

1 known vulnerabilities.

Products

croc 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-119298

    croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive

    croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the receive-side file-readiness loop in src/croc/croc.go treats any sender-controlled basename beginning with croc-stdin- as a trusted text-transf…

    schollz croc github.com/schollz/croc github.com/schollz/croc/v8 Go