CVE-2026-45626
2 advisories.
Go/github.com/getarcaneapp/arcane/backend CVE-2026-45626: medium 6.3, EPSS 0.36%
Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.18.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9mvm-4gwg-v8mp
- https://github.com/getarcaneapp/arcane/security/advisories/GHSA-9mvm-4gwg-v8mp
- https://nvd.nist.gov/vuln/detail/CVE-2026-45626
- https://github.com/getarcaneapp/arcane
CVE-2026-45626 · published · modified · JSON
Go/github.com/getarcaneapp/arcane/backend CVE-2026-45626: unknown, EPSS 0.36%
Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-5292
- https://github.com/getarcaneapp/arcane/security/advisories/GHSA-9mvm-4gwg-v8mp
- https://nvd.nist.gov/vuln/detail/CVE-2026-45626
CVE-2026-45626 · published · modified · JSON