UNKNOWNGo →
Cross-forge account takeover on login in codefloe.com/crowci/crow/v6
Cross-forge account takeover on login in codefloe.com/crowci/crow/v6
Affected packages
- codefloe.com/crowci/crow/v6
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://codefloe.com/crowci/crow/src/branch/main/security/advisories/cross-forge-account-takeover.md
- https://codefloe.com/crowci/crow/commit/6b4405f1ef0126e5074383e551ae38d55c2a7efe
- https://codefloe.com/crowci/crow/releases/tag/v6.4.0
Structured record: https://osv.dev/vulnerability/GO-2026-6216
Recommended response stack
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta