Go/github.com/devtron-labs/devtron CVE-2026-25538: unknown, EPSS 0.54%
Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-4416
- https://github.com/devtron-labs/devtron/security/advisories/GHSA-8wpc-j9q9-j5m2
- https://github.com/devtron-labs/devtron/commit/d2b0d260d858ab1354b73a8f50f7f078ca62706f
CVE-2026-25538 · published · modified · JSON