Go/github.com/zalando/skipper CVE-2026-23742: unknown, EPSS 0.51%
Skipper is vulnerable to arbitrary code execution through lua filters in github.com/zalando/skipper
Action: Upgrade github.com/zalando/skipper to 0.23.0 or later.
go get github.com/zalando/skipper@v0.23.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.23.0 | - |
Fixed versions
| 0.23.0 |
Sources
- osv: GO-2026-4327
- https://github.com/zalando/skipper/security/advisories/GHSA-cc8m-98fm-rc9g
- https://nvd.nist.gov/vuln/detail/CVE-2026-23742
- https://github.com/zalando/skipper/commit/0b52894570773b29e2f3c571b94b4211ef8fa714
- https://github.com/zalando/skipper/releases/tag/v0.23.0
CVE-2026-23742 · published · modified · JSON