Go/github.com/l3montree-dev/devguard CVE-2026-48089: high 7.1, EPSS 0.36%
DevGuard has improper authorization on public assets in github.com/l3montree-dev/devguard
Action: Upgrade github.com/l3montree-dev/devguard to 1.4.2 or later.
go get github.com/l3montree-dev/devguard@v1.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.2 | - |
Fixed versions
| 1.4.2 |
Sources
- osv: GO-2026-5183
- nvd: CVE-2026-48089
- https://github.com/l3montree-dev/devguard/security/advisories/GHSA-6p54-fw2f-q7gf
- https://github.com/l3montree-dev/devguard/commit/1be88ec1309a5dc0566e35a23bdc4ea3ecd11417
CVE-2026-48089 · published · modified · JSON