tocsin

CVE-2026-49447

2 advisories.

Go/github.com/azukaar/cosmos-server CVE-2026-49447: medium 5.3

Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens

Action: Upgrade github.com/azukaar/cosmos-server to 0.22.19 or later.

go get github.com/azukaar/cosmos-server@v0.22.19

Affected

introducedfixedlast affected
0.22.180.22.19-

Fixed versions

0.22.19

Sources

CVE-2026-49447 · published · modified · JSON

Go/github.com/azukaar/cosmos-server CVE-2026-49447: unknown

Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens in github.com/azukaar/cosmos-server

Action: Upgrade github.com/azukaar/cosmos-server to 0.22.19 or later.

go get github.com/azukaar/cosmos-server@v0.22.19

Affected

introducedfixedlast affected
0.22.180.22.19-

Fixed versions

0.22.19

Sources

CVE-2026-49447 · published · modified · JSON