CVE-2026-54246

2 advisories.

Go/github.com/zalando/skipper CVE-2026-54246: medium 5.7, EPSS 0.34%

Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication

Action: Upgrade github.com/zalando/skipper to 0.27.13 or later.

go get github.com/zalando/skipper@v0.27.13

Affected

introduced	fixed	last affected
0	0.27.13	-

Fixed versions

0.27.13

Sources

CVE-2026-54246 · published 2026-07-17T21:46:18Z · modified 2026-07-22T21:11:26.185586295Z · JSON

Go/github.com/zalando/skipper CVE-2026-54246: unknown, EPSS 0.34%

Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication in github.com/zalando/skipper

Action: Upgrade github.com/zalando/skipper to 0.27.13 or later.

go get github.com/zalando/skipper@v0.27.13

Affected

introduced	fixed	last affected
0	0.27.13	-

Fixed versions

0.27.13

Sources

CVE-2026-54246 · published 2026-07-22T20:36:35Z · modified 2026-07-22T21:00:24.248278725Z · JSON