Go/github.com/ccfos/nightingale/v6 CVE-2026-58167: medium 6.5, EPSS 0.41%
Nightingale exposes datasource credentials to low-privilege users
Action: Upgrade github.com/ccfos/nightingale/v6 to 6.7.3-0.20260528033214-762819fbaa23 or later.
go get github.com/ccfos/nightingale/v6@v6.7.3-0.20260528033214-762819fbaa23Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.7.3-0.20260528033214-762819fbaa23 | - |
Fixed versions
| 6.7.3-0.20260528033214-762819fbaa23 |
Sources
- osv: GHSA-27c6-wp53-387x
- https://nvd.nist.gov/vuln/detail/CVE-2026-58167
- https://github.com/ccfos/nightingale/issues/3173
- https://github.com/ccfos/nightingale/pull/3175
- https://github.com/ccfos/nightingale/commit/762819fbaa2350b73bce45bfaf6f8cf74b4abef8
- https://github.com/ccfos/nightingale
- https://github.com/ccfos/nightingale/releases/tag/v9.0.0-beta.2
- https://www.vulncheck.com/advisories/nightingale-beta-2-datasource-credential-disclosure-to-low-privilege-users
CVE-2026-58167 · published · modified · JSON