Start for Free
go

github.com/bishopfox/sliver

View on go registry
24 Total advisories
24 Vulnerabilities
0 Malware

Vulnerabilities

HIGH 8.1
Go

CVE-2023-34758

Silver vulnerable to MitM attack against implants due to a cryptography vulnerability
UNKNOWN
Go

CVE-2026-34227

Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface
UNKNOWN
Go

CVE-2026-34227

Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface in github.com/bishopfox/sliver
UNKNOWN
Go

GO-2026-4899

Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted
UNKNOWN
Go

GHSA-c279-989m-238f

Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopfox/sliver
UNKNOWN
Go

CVE-2026-32941

Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports
UNKNOWN
Go

CVE-2026-32941

Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver
UNKNOWN
Go

CVE-2026-29781

Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers
UNKNOWN
Go

CVE-2026-29781

Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver
UNKNOWN
Go

GHSA-hjr9-wj7v-7hv8

Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver
UNKNOWN
Go

CVE-2025-27093

Silver has unrestricted traffic between Wireguard clients in github.com/bishopfox/sliver
UNKNOWN
Go

CVE-2025-27090

SSRF in sliver teamserver in github.com/bishopfox/sliver
UNKNOWN
Go

CVE-2023-34758

Silver vulnerable to MitM attack against implants due to a cryptography vulnerability in github.com/bishopfox/sliver
UNKNOWN
Go

GO-2026-4548

Sliver has Potential Zip Bomb Denial of Service in GzipEncoder
UNKNOWN
Go

GHSA-2phg-qgmm-r638

Sliver has Potential Zip Bomb Denial of Service in GzipEncoder in github.com/bishopfox/sliver
HIGH 7.5
Go

CVE-2026-25791

Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service
UNKNOWN
Go

CVE-2026-25791

Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver
UNKNOWN
Go

CVE-2026-25760

Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
MEDIUM 6.5
Go

CVE-2026-25760

Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated)
UNKNOWN
Go

GO-2026-4280

Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass
MEDIUM 6.3
Go

CVE-2025-27093

Silver has unrestricted traffic between Wireguard clients
UNKNOWN
Go

CVE-2025-27090

SSRF in sliver teamserver
UNKNOWN
Go

CVE-2024-41111

Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver
HIGH 8.8
Go

CVE-2024-41111

Sliver Allows Authenticated Operator-to-Server Remote Code Execution

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes