CVE-2026-55874
2 advisories.
Go/github.com/seaweedfs/seaweedfs CVE-2026-55874: high 7.7
SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
Action: Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260612000715-b44cf51fe931 or later.
go get github.com/seaweedfs/seaweedfs@v0.0.0-20260612000715-b44cf51fe931Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260612000715-b44cf51fe931 |
Sources
- osv: GHSA-56wq-x3wv-3ff4
- https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-56wq-x3wv-3ff4
- https://nvd.nist.gov/vuln/detail/CVE-2026-55874
- https://github.com/seaweedfs/seaweedfs/pull/9929
- https://github.com/seaweedfs/seaweedfs/commit/b44cf51fe931bd75aa4d37ae766bea90d7f85ccd
- https://github.com/seaweedfs/seaweedfs
- https://github.com/seaweedfs/seaweedfs/releases/tag/4.34
CVE-2026-55874 · published · modified · JSON
Go/github.com/seaweedfs/seaweedfs CVE-2026-55874: unknown
SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read in github.com/seaweedfs/seaweedfs
Action: Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260612000715-b44cf51fe931 or later.
go get github.com/seaweedfs/seaweedfs@v0.0.0-20260612000715-b44cf51fe931Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260612000715-b44cf51fe931 |
Sources
- osv: GO-2026-6327
- https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-56wq-x3wv-3ff4
- https://nvd.nist.gov/vuln/detail/CVE-2026-55874
- https://github.com/seaweedfs/seaweedfs/commit/b44cf51fe931bd75aa4d37ae766bea90d7f85ccd
- https://github.com/seaweedfs/seaweedfs/pull/9929
- https://github.com/seaweedfs/seaweedfs/releases/tag/4.34
CVE-2026-55874 · published · modified · JSON