Product

codefloe.com/crowci/crow/v6 vulnerabilities

1 published CVE affecting codefloe.com/crowci/crow/v6, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 0
Low: 0
Unscored: 1
CISA KEV: 0

Latest codefloe.com/crowci/crow/v6 CVEs

Newest publication first

GO-2026-6216 Cross-forge account takeover on login in codefloe.com/crowci/crow/v6
Published 2026-08-18

Unknown

In codefloe.com/crowci/crow/v6 before 6.4.0, user account lookup during forge login is not scoped to the authenticating forge. An account on one forge matches an existing user on another forge via forge remote ID collision or username collision. On instances with multiple configu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

codefloe.com/crowci/crow/v6 vulnerabilities

Latest codefloe.com/crowci/crow/v6 CVEs

GO-2026-6216 Cross-forge account takeover on login in codefloe.com/crowci/crow/v6