Cisagov

6 CVEs across 1 Cisagov products. Browse Cisagov vulnerabilities, severities, and proof-of-concept exploits.

Cisagov products with known CVEs

ProductCVEs
Malcolm6
Cisagov CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-19671Medium6.52026-08-18Malcolm's upload-processing pipeline (scripts/safe-extract.py) enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting containe…
CVE-2026-19670Medium5.42026-08-18Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /auth, /admin…
CVE-2026-63177High7.12026-08-11Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx OpenResty Lua layer evaluates the r…
CVE-2026-63134Medium5.42026-08-11Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` protects file extraction with libarchive's secure flags, but crea…
CVE-2026-63133Medium6.52026-08-11Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` extracts uploaded archives with no limit on entry count, director…
CVE-2026-55676High8.82026-08-11Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `POST /server/php/submit.php` and stores…