Go/github.com/zitadel/zitadel/v2 CVE-2026-27945: low, EPSS 0.38%

ZITADEL has potential SSRF via Actions

Action: Upgrade github.com/zitadel/zitadel/v2 to 1.80.0-v2.20.0.20260225053328-b2532e966621 or later.

go get github.com/zitadel/zitadel/v2@v4.11.1

go get github.com/zitadel/zitadel/v2@v1.80.0-v2.20.0.20260225053328-b2532e966621

Affected

Fixed versions

Sources

• osv: GHSA-7777-fhq9-592v
• https://github.com/zitadel/zitadel/security/advisories/GHSA-7777-fhq9-592v
• https://nvd.nist.gov/vuln/detail/CVE-2026-27945
• https://github.com/zitadel/zitadel/commit/b2532e9666215bef04855d138ca716045bb74a06
• https://github.com/zitadel/zitadel
• https://github.com/zitadel/zitadel/releases/tag/v4.11.1

CVE-2026-27945 · published 2026-02-27T21:33:54Z · modified 2026-04-16T02:14:28.447936260Z · JSON