Skip to content
Noroxi

Jakub Ciolek (https://ciolek.dev)

10 credited records · 10 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Jakub Ciolek (https://ciolek.dev)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Credited records

Researchers
  • Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

    HighCVSS 7.5No exploitEPSS 0%

    go standard library · net/textprotoOct 8, 2026

  • HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http

    HighCVSS 7.5No exploitEPSS 0%

    go standard library · net/httpOct 8, 2026

  • Excessive CPU consumption from repeated initial window changes in net/http

    HighCVSS 7.5No exploitEPSS 0%

    go standard library · net/httpOct 8, 2026

  • Lack of limit on size of parsed Range headers in net/http

    HighCVSS 7.5No exploitEPSS 0%

    go standard library · net/httpOct 8, 2026

  • Inefficient candidate hostname parsing in crypto/x509

    MediumCVSS 6.5Proof of conceptEPSS 0%

    go standard library · crypto/x509Jun 2, 2026

  • Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

    HighCVSS 7.5No exploitEPSS 0%

    golang · goApr 7, 2026

  • Inefficient policy validation in crypto/x509

    HighCVSS 7.5No exploitEPSS 0%

    golang · goApr 7, 2026

  • Unexpected work during chain building in crypto/x509

    HighCVSS 7.5No exploitEPSS 0%

    golang · goApr 7, 2026

  • Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile

    HighCVSS 7.1No exploitEPSS 0%

    golang · goApr 7, 2026

  • Missing bound checks can lead to memory corruption in safe Go in cmd/compile

    CriticalCVSS 9.8No exploitEPSS 0%

    golang · goApr 7, 2026