Go/github.com/zhenorzz/goploy CVE-2026-114665, CVE-2026-53553: medium 6.5, EPSS 0.35%

Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise in github.com/zhenorzz/goploy

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5938
• nvd: CVE-2026-114665
• https://github.com/zhenorzz/goploy/security/advisories/GHSA-4g5x-hcwm-82jw

CVE-2026-114665, CVE-2026-53553 · published 2026-07-17T19:42:05Z · modified 2026-10-23T02:55:59.233579620Z · JSON