codefloe.com vulnerabilities

Products

• codefloe.com/crowci/crow/v6 1

Latest codefloe.com CVEs

Newest publication first

1. GO-2026-6216 Cross-forge account takeover on login in codefloe.com/crowci/crow/v6

   Published 2026-08-18

   Unknown

   In codefloe.com/crowci/crow/v6 before 6.4.0, user account lookup during forge login is not scoped to the authenticating forge. An account on one forge matches an existing user on another forge via forge remote ID collision or username collision. On instances with multiple configu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.