Go/github.com/OliveTin/OliveTin CVE-2026-48708: high 7.5, EPSS 0.54%

OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination

Action: Upgrade github.com/OliveTin/OliveTin to 0.0.0-20260521225117-d74da9314005 or later.

go get github.com/OliveTin/OliveTin@v0.0.0-20260521225117-d74da9314005

Affected

Fixed versions

Sources

• osv: GHSA-7fq5-7wr8-rjwj
• https://github.com/OliveTin/OliveTin/security/advisories/GHSA-7fq5-7wr8-rjwj
• https://nvd.nist.gov/vuln/detail/CVE-2026-48708
• https://github.com/OliveTin/OliveTin/commit/d74da9314005954dd49fa20dabf272247bc76519
• https://github.com/OliveTin/OliveTin
• https://github.com/OliveTin/OliveTin/releases/tag/3000.13.0

CVE-2026-48708 · published 2026-06-24T17:38:12Z · modified 2026-07-20T21:32:33Z · JSON