CVE-2026-49339
2 advisories.
Go/go.senan.xyz/gonic CVE-2026-49339: high 7.1, EPSS 0.39%
gonic: Path Traversal in playlist `id` bypasses ownership check, enabling any user to read/delete other users' playlists
Action: Upgrade go.senan.xyz/gonic to 0.21.0 or later.
go get go.senan.xyz/gonic@v0.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.21.0 | - |
Fixed versions
| 0.21.0 |
Sources
- osv: GHSA-2fp4-5v5c-4448
- https://github.com/sentriz/gonic/security/advisories/GHSA-2fp4-5v5c-4448
- https://nvd.nist.gov/vuln/detail/CVE-2026-49339
- https://github.com/sentriz/gonic/commit/0824bed88f6bbc490ba28bf09d28e5dfeb07b445
- https://github.com/sentriz/gonic/commit/6dd71e6
- https://github.com/sentriz/gonic
CVE-2026-49339 · published · modified · JSON
Go/go.senan.xyz/gonic CVE-2026-49339: unknown, EPSS 0.39%
gonic: Path Traversal in playlist `id` bypasses ownership check, enabling any user to read/delete other users' playlists in go.senan.xyz/gonic
Action: Upgrade go.senan.xyz/gonic to 0.21.0 or later.
go get go.senan.xyz/gonic@v0.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.21.0 | - |
Fixed versions
| 0.21.0 |
Sources
- osv: GO-2026-5825
- https://github.com/sentriz/gonic/security/advisories/GHSA-2fp4-5v5c-4448
- https://nvd.nist.gov/vuln/detail/CVE-2026-49339
- https://github.com/sentriz/gonic/commit/0824bed88f6bbc490ba28bf09d28e5dfeb07b445
- https://github.com/sentriz/gonic/commit/6dd71e6
CVE-2026-49339 · published · modified · JSON