Go/github.com/jpillora/chisel CVE-2026-48113: high, EPSS 0.39%
Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection
Action: Upgrade github.com/jpillora/chisel to 1.11.5 or later.
go get github.com/jpillora/chisel@v1.11.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.5 | - |
Fixed versions
| 1.11.5 |
Sources
- osv: GHSA-24fp-5v3p-rvpw
- https://github.com/jpillora/chisel/security/advisories/GHSA-24fp-5v3p-rvpw
- https://github.com/jpillora/chisel
CVE-2026-48113 · published · modified · JSON