CVE-2026-44883

2 advisories.

Go/github.com/portainer/portainer CVE-2026-44883: high 7.5

Portainer: JWT accepted in URL query leaks tokens to logs and referers

Action: Upgrade github.com/portainer/portainer to 2.33.8 or later.

go get github.com/portainer/portainer@v2.33.8

go get github.com/portainer/portainer@v2.39.2

go get github.com/portainer/portainer@v2.41.0

Affected

introduced	fixed	last affected
2.33.0	2.33.8	-
2.39.0	2.39.2	-
2.40.0	2.41.0	-

Fixed versions

2.33.8

2.39.2

2.41.0

Sources

CVE-2026-44883 · published 2026-05-14T16:33:48Z · modified 2026-06-25T23:11:21.990161738Z · JSON

Go/github.com/portainer/portainer CVE-2026-44883: unknown

Portainer: JWT accepted in URL query leaks tokens to logs and referers in github.com/portainer/portainer

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-44883 · published 2026-06-25T22:34:31Z · modified 2026-06-25T23:01:15.252233936Z · JSON