Go/github.com/bablilayoub/openhole CVE-2026-54650: unknown, EPSS 0.53%
openhole-server vulnerable to path traversal via URL-decoded request path in github.com/bablilayoub/openhole
Action: Upgrade github.com/bablilayoub/openhole to 0.1.2 or later.
go get github.com/bablilayoub/openhole@v0.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.2 | - |
Fixed versions
| 0.1.2 |
Sources
- osv: GO-2026-6135
- https://github.com/bablilayoub/openhole/security/advisories/GHSA-fh2f-xfxc-q9cc
- https://github.com/bablilayoub/openhole/commit/a28c27adde2a7ed0c347b730c8707208c0f78ed3
- https://github.com/bablilayoub/openhole/releases/tag/v0.1.2
CVE-2026-54650 · published · modified · JSON