Go/github.com/nuclio/nuclio CVE-2026-52833: unknown, EPSS 0.55%
Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE in github.com/nuclio/nuclio
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6004
- https://github.com/nuclio/nuclio/security/advisories/GHSA-3v79-m2cg-89ww
- https://github.com/nuclio/nuclio/commit/4c78040c759068e927f3ed7c6507543c15d4ae56
- https://github.com/nuclio/nuclio/pull/4149
- https://github.com/nuclio/nuclio/releases/tag/1.16.5
CVE-2026-52833 · published · modified · JSON