Skip to content
OpenAdvisories

Vendor

xddxdd

2 known vulnerabilities.

Products

bird-lg-go 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-63644

    bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file r…

    xddxdd bird-lg-go
  • High 7.5
    CVE-2026-45047

    bird-lg-go: Fatal Out-of-Memory (OOM) Denial of Service via Unbounded JSON Decoding

    bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, the apiHandler (and similarly webHandlerTelegramBot) processes user-provided JSON payloads by directly using json.NewDecoder(r.Body).Decode(&request) without restricting the maximum read size. An unaut…

    xddxdd bird-lg-go github.com/xddxdd/bird-lg-go Go