Go/github.com/OliveTin/OliveTin CVE-2026-28790: high 7.5, EPSS 0.68%

OliveTin has Unauthenticated Action Termination via KillAction When Guests Must Login

Action: Upgrade github.com/OliveTin/OliveTin to 0.0.0-20260302002902-d9804182eae4 or later.

go get github.com/OliveTin/OliveTin@v0.0.0-20260302002902-d9804182eae4

Affected

Fixed versions

Sources

• osv: GHSA-4fqm-6fmh-82mq
• https://github.com/OliveTin/OliveTin/security/advisories/GHSA-4fqm-6fmh-82mq
• https://nvd.nist.gov/vuln/detail/CVE-2026-28790
• https://github.com/OliveTin/OliveTin/commit/d9804182eae43cf49f735e6533ddbe1541c2b9a9
• https://github.com/OliveTin/OliveTin
• https://github.com/OliveTin/OliveTin/releases/tag/3000.11.0

CVE-2026-28790 · published 2026-03-02T21:42:12Z · modified 2026-03-23T04:56:21.104514721Z · JSON