A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as b91aa4674d460993765884e8463c70e6d886bc90. It is recommended to apply a patch to fix this issue. VDB-221506 is the identifier assigned to this vulnerability.
CVE-2015-10085
This low-severity CVE scores 3.5 under NVD CVSS v3. EPSS exploit probability: 0.5%, top 35% of all CVEs by exploit prediction. GitHub Security Advisory data not yet ingested — confidence will rise once GHSA publishes (typical lag: hours to days for open-source ecosystem CVEs; never for infrastructure-only CVEs).
- Lower severity and no public exploit yet
No vendor fix yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for a patch.
- CVSS v3
- 3.5
- EG Score
- 3.5(medium)
- EPSS
- 57.2%
- KEV
- Not listed
Published
February 21, 2023
Last Modified
November 21, 2024
References (8)
- cna@vuldbhttps://github.com/gopistolet/gopistolet/commit/b91aa4674d460993765884e8463c70e6d886bc90
- cna@vuldbhttps://github.com/gopistolet/gopistolet/pull/27
- cna@vuldbhttps://vuldb.com/?ctiid.221506
- cna@vuldbhttps://vuldb.com/?id.221506
- af854a3a-2127-422b-91ae-364da2661108https://github.com/gopistolet/gopistolet/commit/b91aa4674d460993765884e8463c70e6d886bc90
- af854a3a-2127-422b-91ae-364da2661108https://github.com/gopistolet/gopistolet/pull/27
- af854a3a-2127-422b-91ae-364da2661108https://vuldb.com/?ctiid.221506
- af854a3a-2127-422b-91ae-364da2661108https://vuldb.com/?id.221506
Affected Packages
(1 across 1 ecosystem)
Go(1)
| Package | Vulnerable range | Fixed in | Dependents |
|---|---|---|---|
| github.com/gopistolet/gopistolet | — | 0.0.0-20210418093520-a5395f728f8d | — |
Weakness Classification(1)
MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
Data Freshness Timeline
(refreshed 11× in last 7d / 38× in last 30d)
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
- 2026-07-22 14:04 UTCEPSS rescore
- 2026-07-21 15:21 UTCEPSS rescore
- 2026-07-21 15:21 UTCEPSS rescore
- 2026-07-20 17:03 UTCEPSS rescore
- 2026-07-19 14:27 UTCEPSS rescore
- 2026-07-19 14:27 UTCEPSS rescore
- 2026-07-19 02:26 UTCEPSS rescore
- 2026-07-19 02:26 UTCEPSS rescore
- 2026-07-18 10:00 UTCEPSS rescore
- 2026-07-16 16:59 UTCEPSS rescore
- 2026-07-16 16:59 UTCEPSS rescore
- 2026-07-15 16:54 UTCEPSS rescore
- 2026-07-15 16:54 UTCEPSS rescore
- 2026-07-15 01:56 UTCEPSS rescore
- 2026-07-13 22:26 UTCEPSS rescore
- 2026-07-12 05:42 UTCEPSS rescore
- 2026-07-11 08:23 UTCEPSS rescore
- 2026-07-09 19:05 UTCEPSS rescore
- 2026-07-08 15:10 UTCEPSS rescore
- 2026-07-07 13:42 UTCEPSS rescore
- 2026-07-06 16:24 UTCEPSS rescore
- 2026-07-06 02:20 UTCEPSS rescore
- 2026-07-05 02:26 UTCEPSS rescore
- 2026-07-04 06:27 UTCEPSS rescore
- 2026-07-02 15:21 UTCEPSS rescore
Show 59 moreShow fewer
- 2026-07-01 15:02 UTCEPSS rescore
- 2026-07-01 15:02 UTCEPSS rescore
- 2026-06-30 23:19 UTCEPSS rescore
- 2026-06-30 23:19 UTCEPSS rescore
- 2026-06-29 14:03 UTCEPSS rescore
- 2026-06-28 14:03 UTCEPSS rescore
- 2026-06-28 04:53 UTCEPSS rescore
- 2026-06-27 03:05 UTCEPSS rescore
- 2026-06-25 13:47 UTCEPSS rescore
- 2026-06-25 13:47 UTCEPSS rescore
- 2026-06-24 14:02 UTCEPSS rescore
- 2026-06-24 14:02 UTCEPSS rescore
- 2026-06-23 21:30 UTCEPSS rescore
- 2026-06-22 14:23 UTCEPSS rescore
- 2026-06-22 14:22 UTCEPSS rescore
- 2026-06-21 14:54 UTCEPSS rescore
- 2026-06-21 01:57 UTCEPSS rescore
- 2026-06-21 01:57 UTCEPSS rescore
- 2026-06-19 19:23 UTCEPSS rescore
- 2026-06-19 19:23 UTCEPSS rescore
- 2026-06-18 17:50 UTCEPSS rescore
- 2026-06-18 17:49 UTCEPSS rescore
- 2026-06-17 17:49 UTCEPSS rescore
- 2026-06-16 17:50 UTCEPSS rescore
- 2026-06-16 17:49 UTCEPSS rescore
- 2026-06-15 17:45 UTCEPSS rescore
- 2026-06-14 23:14 UTCEPSS rescore
- 2026-06-13 22:57 UTCEPSS rescore
- 2026-06-12 23:09 UTCEPSS rescore
- 2026-06-11 13:57 UTCEPSS rescore
- 2026-06-10 22:15 UTCEPSS rescore
- 2026-06-08 14:14 UTCEPSS rescore
- 2026-06-07 15:22 UTCEPSS rescore
- 2026-06-06 13:45 UTCEPSS rescore
- 2026-06-05 22:44 UTCEPSS rescore
- 2026-06-05 06:08 UTCEPSS rescore
- 2026-06-05 06:08 UTCEPSS rescore
- 2026-06-04 13:10 UTCEPSS rescore
- 2026-06-04 13:09 UTCEPSS rescore
- 2026-06-02 20:10 UTCEPSS rescore
- 2026-06-02 20:10 UTCEPSS rescore
- 2026-06-01 13:49 UTCEPSS rescore
- 2026-06-01 13:49 UTCEPSS rescore
- 2026-05-31 22:28 UTCEPSS rescore
- 2026-05-31 22:28 UTCEPSS rescore
- 2026-05-31 22:28 UTCEPSS rescore
- 2026-05-31 00:14 UTCEPSS rescore
- 2026-05-29 13:41 UTCEPSS rescore
- 2026-05-28 13:42 UTCEPSS rescore
- 2026-05-28 13:42 UTCEPSS rescore
- 2026-05-27 13:38 UTCEPSS rescore
- 2026-05-27 13:38 UTCEPSS rescore
- 2026-05-26 13:41 UTCEPSS rescore
- 2026-05-26 13:41 UTCEPSS rescore
- 2026-05-26 07:16 UTCEPSS rescore
- 2026-05-26 07:16 UTCEPSS rescore
- 2026-05-25 06:19 UTCEG score recompute
- 2026-05-24 16:43 UTCEPSS rescore
- 2026-05-23 15:10 UTCEPSS rescore
Related CVEs(same CWE)
Same CWE
10 shownCWE-404
- CVE-2018-8639NVD 7.8EG 9.0 KEVEPSS 97%HIGH
- CVE-2018-8611NVD 7.8EG 9.0 KEVEPSS 90%HIGH
- CVE-2018-8453NVD 7.8EG 9.0 KEVEPSS 99%HIGH
- CVE-2018-8406NVD 7.8EG 9.0 KEVHIGH
- CVE-2018-8405NVD 7.8EG 9.0 KEVHIGH
- CVE-2018-8120NVD 7.0EG 9.0 KEVEPSS 99%HIGH
- CVE-2017-6627NVD 7.5EG 9.0 KEVEPSS 93%HIGH
- CVE-2018-8450EG 8.8EPSS 97%HIGH
- CVE-2019-1708EG 8.6HIGH
- CVE-2019-1706EG 8.6HIGH
Frequently asked(5)
What is CVE-2015-10085?
When was CVE-2015-10085 disclosed?
Is CVE-2015-10085 actively exploited?
What is the CVSS score of CVE-2015-10085?
How do I remediate CVE-2015-10085?
Dependency Blast Radius
See which npm, PyPI, Go, and Maven packages are affected by CVE-2015-10085
Is Your Infrastructure Affected by CVE-2015-10085?
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.