{"id":"GO-2026-6777","revision":"bdd3db8ff6d540a49aec46623dccbb92","records":[{"revision":"bdd3db8ff6d540a49aec46623dccbb92","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6777","aliases":["CVE-2026-77622","GHSA-663m-7x7m-g4fw"],"title":"Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder in github.com/bishopfox/sliver","description":"Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder in github.com/bishopfox/sliver","state":0,"publishedAt":"2026-10-19T21:08:35+00:00","modifiedAt":"2026-10-19T21:31:50.7588521+00:00","affected":[{"ecosystem":"Go","name":"github.com/bishopfox/sliver","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.7.6"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/BishopFox/sliver/security/advisories/GHSA-663m-7x7m-g4fw","https://github.com/BishopFox/sliver/commit/80273462bd8b2a3cd724d2d6d0301a0cabfa977d","https://github.com/BishopFox/sliver/releases/tag/v1.7.6"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6777","license":"OSV · upstream source license applies","key":"osv:GO-2026-6777","identifiers":["GO-2026-6777","CVE-2026-77622","GHSA-663m-7x7m-g4fw"]},"retained":false,"historicalAffected":[]}],"coverage":[]}