Go/github.com/juju/juju CVE-2026-32694: medium 6.6, EPSS 0.28%
Juju affected by Confused Deputy IDOR attack via Predictable user specified ID in Juju Secrets in github.com/juju/juju
Action: Upgrade github.com/juju/juju to 0.0.0-20260319091847-d06919eb03ec or later.
go get github.com/juju/juju@v0.0.0-20260319091847-d06919eb03ecAffected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20221021155847-35c560704ee2 | 0.0.0-20260319091847-d06919eb03ec | - |
Fixed versions
| 0.0.0-20260319091847-d06919eb03ec |
Sources
- osv: GO-2026-4778
- nvd: CVE-2026-32694
- https://github.com/juju/juju/security/advisories/GHSA-5cj2-rqqf-hx9p
- https://github.com/juju/juju/commit/d06919eb03ec68156818bcc304b5fe1c39a8f9e9
CVE-2026-32694 · published · modified · JSON