Go/github.com/ccfos/nightingale/v4 CVE-2026-58167: unknown, EPSS 0.41%
Nightingale exposes datasource credentials to low-privilege users in github.com/ccfos/nightingale
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6638#Go/github.com/ccfos/nightingale/v4
- https://github.com/advisories/GHSA-27c6-wp53-387x
- https://nvd.nist.gov/vuln/detail/CVE-2026-58167
- https://github.com/ccfos/nightingale/commit/762819fbaa2350b73bce45bfaf6f8cf74b4abef8
- https://github.com/ccfos/nightingale/pull/3175
- https://github.com/ccfos/nightingale/issues/3173
- https://github.com/ccfos/nightingale/releases/tag/v9.0.0-beta.2
- https://www.vulncheck.com/advisories/nightingale-beta-2-datasource-credential-disclosure-to-low-privilege-users
CVE-2026-58167 · published · modified · JSON