Go/github.com/drakkan/sftpgo/v2 CVE-2026-103028: medium 4.3

SFTPGo source-side file-pattern filter bypass during copy operations

Action: Upgrade github.com/drakkan/sftpgo/v2 to 2.7.6 or later.

go get github.com/drakkan/sftpgo/v2@v2.7.6

Affected

Fixed versions

Sources

• osv: GHSA-wwv9-g5x4-966q
• https://github.com/drakkan/sftpgo/security/advisories/GHSA-wwv9-g5x4-966q
• https://nvd.nist.gov/vuln/detail/CVE-2026-103028
• https://github.com/drakkan/sftpgo/commit/dc8886bc079094b4ac2338df683f358b7676b5eb
• https://github.com/drakkan/sftpgo
• https://github.com/drakkan/sftpgo/releases/tag/v2.7.6

CVE-2026-103028 · published 2026-10-15T20:22:10Z · modified 2026-10-19T21:41:22.513452094Z · JSON