Go/github.com/getarcaneapp/arcane/backend CVE-2026-47179: high 7.7, EPSS 0.31%

Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

Action: Upgrade github.com/getarcaneapp/arcane/backend to 1.19.4 or later.

go get github.com/getarcaneapp/arcane/backend@v1.19.4

Affected

Fixed versions

Sources

• osv: GO-2026-5308
• nvd: CVE-2026-47179
• https://github.com/getarcaneapp/arcane/security/advisories/GHSA-c3px-h233-h6fq
• https://github.com/getarcaneapp/arcane/commit/b6cbffabf61dbc3f12a28d3b5830e3c6b7e67daf

CVE-2026-47179 · published 2026-06-25T18:43:19Z · modified 2026-06-25T19:45:27.866662690Z · JSON