Go/github.com/orneryd/nornicdb CVE-2026-42072: critical 9.8, EPSS 0.44%

NornicDB has Improper Network Binding in its Bolt Server, allowing unauthorized remote access

Action: Upgrade github.com/orneryd/nornicdb to 1.0.42-hotfix or later.

go get github.com/orneryd/nornicdb@v1.0.42-hotfix

Affected

Fixed versions

Sources

• osv: GHSA-2hp7-65r3-wv54
• https://github.com/orneryd/NornicDB/security/advisories/GHSA-2hp7-65r3-wv54
• https://nvd.nist.gov/vuln/detail/CVE-2026-42072
• https://github.com/orneryd/NornicDB/commit/adce4f9a9fc7b6aada07c0bfa2d737cd7a6efaca
• https://github.com/orneryd/NornicDB
• https://github.com/orneryd/NornicDB/releases/tag/v1.0.42
• https://github.com/orneryd/NornicDB/releases/tag/v1.0.42-hotfix

CVE-2026-42072 · published 2026-04-22T22:03:43Z · modified 2026-05-20T19:41:02.281478581Z · JSON