GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
6965
Downloads
12.9M
Verified
6965
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-73613: Go Raw Os Delete Of Untrusted Or Stale Pathcve-2026-73613-go-raw-os-delete-of-untrusted-or-stale-path

A path coming from request input or read back from a stored cache entry is deleted with a raw host-level OS call (os.Remove/os.RemoveAll/syscall.Unlink/unix.Unlink). This delete bypasses the application's scoped/validating filesystem abstraction and any delete-permission check, and the kernel re-resolves every ancestor component at unlink time, so a symlink

GoCVE-2026-73613CWE-22CWE-367CWE-59
by Provallyupdated 2026-10-27Apache-2.0
450 direct45 via packs
85
All matching rules loaded.