Xddxdd vulnerabilities
We track 3 vulnerabilities in Xddxdd products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
Latest Xddxdd vulnerabilities
- 7.5 High severity
bird-lg-go: Improper Neutralization of Argument Delimiters in a Command
bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bash_history. This issue has been pat
- 7.5 High severity
bird-lg-go: Uncontrolled Resource Consumption
bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, the apiHandler (and similarly webHandlerTelegramBot) processes user-provided JSON payloads by directly using json.NewDecoder(r.Body).Decode(&request) without restricting the maximum read size. An unauth
- 7.5 High severity
Bird-lg-go: Improper Neutralization of Argument Delimiters in a Command
An Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute module uses shlex.Split to parse user input without validation, allowing remote attackers to inject arbitrary flags (e.g., -w, -q) via the q parameter. This can be e