tocsin

Go/github.com/xyproto/algernon CVE-2026-45721: unknown, EPSS 0.44%

Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon

Action: Upgrade github.com/xyproto/algernon to 1.17.7 or later.

go get github.com/xyproto/algernon@v1.17.7

Affected

introducedfixedlast affected
01.17.7-

Fixed versions

1.17.7

Sources

CVE-2026-45721 · published · modified · JSON