Go/github.com/zitadel/zitadel CVE-2026-55671: low, EPSS 0.41%

ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components

Action: Upgrade github.com/zitadel/zitadel to 1.80.0-v2.20.0.20260615133614-8e82ec1cb9a2 or later.

go get github.com/zitadel/zitadel@v1.80.0-v2.20.0.20260615133614-8e82ec1cb9a2

Affected

Fixed versions

Sources

• osv: GHSA-29jh-8cfq-rr8x
• https://github.com/zitadel/zitadel/security/advisories/GHSA-29jh-8cfq-rr8x
• https://github.com/zitadel/zitadel/commit/8e82ec1cb9a2b154ff48d3a0fa96b43d1428061f
• https://github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/releases/tag/v4.15.2

CVE-2026-55671 · published 2026-06-18T13:01:25Z · modified 2026-06-25T18:56:22.822009604Z · JSON