Go/github.com/concourse/concourse CVE-2026-49826: low, EPSS 0.53%

Concourse login flow has an open redirect issue

Action: Upgrade github.com/concourse/concourse to 1.6.1-0.20260526150512-ac60be5f0435 or later.

go get github.com/concourse/concourse@v1.6.1-0.20260526150512-ac60be5f0435

Affected

Fixed versions

Sources

• osv: GHSA-8w27-c4vc-88q9
• https://github.com/concourse/concourse/security/advisories/GHSA-8w27-c4vc-88q9
• https://github.com/concourse/concourse/commit/ac60be5f0435b6592f5a4fcc089050d72ad2452c
• https://github.com/concourse/concourse
• https://github.com/concourse/concourse/releases/tag/v8.2.3

CVE-2026-49826 · published 2026-07-01T19:01:16Z · modified 2026-08-19T09:55:28.952979039Z · JSON