CVE-2026-50192

2 advisories.

Go/github.com/kerberos-io/agent/machinery CVE-2026-50192: medium

Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect

Action: Upgrade github.com/kerberos-io/agent/machinery to 0.0.0-20260528173546-51f1a52e170f or later.

go get github.com/kerberos-io/agent/machinery@v0.0.0-20260528173546-51f1a52e170f

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

0.0.0-20260528173546-51f1a52e170f

Sources

CVE-2026-50192 · published 2026-07-02T17:33:36Z · modified 2026-07-07T16:11:23.177324560Z · JSON

Go/github.com/kerberos-io/agent/machinery CVE-2026-50192: unknown

Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect in github.com/kerberos-io/agent/machinery

Action: Upgrade github.com/kerberos-io/agent/machinery to 0.0.0-20260528173546-51f1a52e170f or later.

go get github.com/kerberos-io/agent/machinery@v0.0.0-20260528173546-51f1a52e170f

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

0.0.0-20260528173546-51f1a52e170f

Sources

CVE-2026-50192 · published 2026-07-07T15:26:37Z · modified 2026-07-07T16:01:31.692174672Z · JSON