tocsin

Go/github.com/zhenorzz/goploy CVE-2026-53552: unknown, EPSS 0.35%

Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers in github.com/zhenorzz/goploy

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-53552 · published · modified · JSON