Go/github.com/l3montree-dev/devguard CVE-2026-42300: critical 9.3, EPSS 0.26%
DevGuard has an unauthenticated identity assertion via `X-Admin-Token` header
Action: Upgrade github.com/l3montree-dev/devguard to 1.2.2 or later.
go get github.com/l3montree-dev/devguard@v1.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.2 | - |
Fixed versions
| 1.2.2 |
Sources
- osv: GHSA-2g9v-7mr5-fgjg
- nvd: CVE-2026-42300
- https://github.com/l3montree-dev/devguard/security/advisories/GHSA-2g9v-7mr5-fgjg
- https://github.com/l3montree-dev/devguard/commit/6f38310bf93b2a63df3055038f4da82b1f4e6d9a
- https://github.com/l3montree-dev/devguard
CVE-2026-42300 · published · modified · JSON