Go/github.com/devtron-labs/devtron CVE-2026-25538: high, EPSS 0.54%
Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8wpc-j9q9-j5m2
- https://github.com/devtron-labs/devtron/security/advisories/GHSA-8wpc-j9q9-j5m2
- https://nvd.nist.gov/vuln/detail/CVE-2026-25538
- https://github.com/devtron-labs/devtron/commit/d2b0d260d858ab1354b73a8f50f7f078ca62706f
- https://github.com/devtron-labs/devtron
CVE-2026-25538 · published · modified · JSON