Go/github.com/nuclio/nuclio CVE-2026-52832: medium 4.9, EPSS 0.56%

Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

Action: Upgrade github.com/nuclio/nuclio to 1.16.5 or later.

go get github.com/nuclio/nuclio@v1.16.5

Affected

Fixed versions

Sources

• osv: GHSA-wpcj-rmv4-86qg
• https://github.com/nuclio/nuclio/security/advisories/GHSA-wpcj-rmv4-86qg
• https://github.com/nuclio/nuclio/pull/4143
• https://github.com/nuclio/nuclio/commit/2a55d3a8bd4d49226cb4742020303f5bf2a0931d
• https://github.com/nuclio/nuclio
• https://github.com/nuclio/nuclio/releases/tag/1.16.5

CVE-2026-52832 · published 2026-07-16T19:47:17Z · modified 2026-07-21T19:18:53.882453423Z · JSON