Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
12M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
2 rules matched. Showing 2 loaded rules.
Publish rule
CVE-2026-71271: Go Base64 Decode Ignored Errorcve-2026-71271-go-base64-decode-ignored-error

Base64 decoding error is ignored in an inline 'if' initialization checking '$ERR == nil' without an 'else' branch or handling '$ERR != nil'. If decoding fails, execution silently proceeds with un-decoded or invalid data.

by Provallyupdated 2026-09-02Apache-2.0
1.2K0 direct1.2K via packs
downloads
79quality
CVE-2026-51583: Go Base64 Decode Error Swallowedcve-2026-51583-go-base64-decode-error-swallowed

Base64 decoding error is silently swallowed when processing input. If base64 decoding fails, execution continues without error handling, potentially using unvalidated raw string data as a key or payload. Check `if err != nil` and handle or return the decoding error explicitly.

by Provallyupdated 2026-09-02Apache-2.0
1.2K0 direct1.2K via packs
downloads
79quality
All matching rules loaded.