CVE-2026-58167
5 advisories.
Go/github.com/ccfos/nightingale/v6 CVE-2026-58167: medium 6.5
Nightingale exposes datasource credentials to low-privilege users
Action: Upgrade github.com/ccfos/nightingale/v6 to 6.7.3-0.20260528033214-762819fbaa23 or later.
go get github.com/ccfos/nightingale/v6@v6.7.3-0.20260528033214-762819fbaa23Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.7.3-0.20260528033214-762819fbaa23 | - |
Fixed versions
| 6.7.3-0.20260528033214-762819fbaa23 |
Sources
- osv: GHSA-27c6-wp53-387x
- https://nvd.nist.gov/vuln/detail/CVE-2026-58167
- https://github.com/ccfos/nightingale/issues/3173
- https://github.com/ccfos/nightingale/pull/3175
- https://github.com/ccfos/nightingale/commit/762819fbaa2350b73bce45bfaf6f8cf74b4abef8
- https://github.com/ccfos/nightingale
- https://github.com/ccfos/nightingale/releases/tag/v9.0.0-beta.2
- https://www.vulncheck.com/advisories/nightingale-beta-2-datasource-credential-disclosure-to-low-privilege-users
CVE-2026-58167 · published · modified · JSON
Go/github.com/ccfos/nightingale CVE-2026-58167: unknown
Nightingale exposes datasource credentials to low-privilege users in github.com/ccfos/nightingale
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6638
- https://github.com/advisories/GHSA-27c6-wp53-387x
- https://nvd.nist.gov/vuln/detail/CVE-2026-58167
- https://github.com/ccfos/nightingale/commit/762819fbaa2350b73bce45bfaf6f8cf74b4abef8
- https://github.com/ccfos/nightingale/pull/3175
- https://github.com/ccfos/nightingale/issues/3173
- https://github.com/ccfos/nightingale/releases/tag/v9.0.0-beta.2
- https://www.vulncheck.com/advisories/nightingale-beta-2-datasource-credential-disclosure-to-low-privilege-users
CVE-2026-58167 · published · modified · JSON
Go/github.com/ccfos/nightingale/v4 CVE-2026-58167: unknown
Nightingale exposes datasource credentials to low-privilege users in github.com/ccfos/nightingale
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6638#Go/github.com/ccfos/nightingale/v4
- https://github.com/advisories/GHSA-27c6-wp53-387x
- https://nvd.nist.gov/vuln/detail/CVE-2026-58167
- https://github.com/ccfos/nightingale/commit/762819fbaa2350b73bce45bfaf6f8cf74b4abef8
- https://github.com/ccfos/nightingale/pull/3175
- https://github.com/ccfos/nightingale/issues/3173
- https://github.com/ccfos/nightingale/releases/tag/v9.0.0-beta.2
- https://www.vulncheck.com/advisories/nightingale-beta-2-datasource-credential-disclosure-to-low-privilege-users
CVE-2026-58167 · published · modified · JSON
Go/github.com/ccfos/nightingale/v5 CVE-2026-58167: unknown
Nightingale exposes datasource credentials to low-privilege users in github.com/ccfos/nightingale
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6638#Go/github.com/ccfos/nightingale/v5
- https://github.com/advisories/GHSA-27c6-wp53-387x
- https://nvd.nist.gov/vuln/detail/CVE-2026-58167
- https://github.com/ccfos/nightingale/commit/762819fbaa2350b73bce45bfaf6f8cf74b4abef8
- https://github.com/ccfos/nightingale/pull/3175
- https://github.com/ccfos/nightingale/issues/3173
- https://github.com/ccfos/nightingale/releases/tag/v9.0.0-beta.2
- https://www.vulncheck.com/advisories/nightingale-beta-2-datasource-credential-disclosure-to-low-privilege-users
CVE-2026-58167 · published · modified · JSON
Go/github.com/ccfos/nightingale/v6 CVE-2026-58167: unknown
Nightingale exposes datasource credentials to low-privilege users in github.com/ccfos/nightingale
Action: Upgrade github.com/ccfos/nightingale/v6 to 6.7.3-0.20260528033214-762819fbaa23 or later.
go get github.com/ccfos/nightingale/v6@v6.7.3-0.20260528033214-762819fbaa23Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.7.3-0.20260528033214-762819fbaa23 | - |
Fixed versions
| 6.7.3-0.20260528033214-762819fbaa23 |
Sources
- osv: GO-2026-6638#Go/github.com/ccfos/nightingale/v6
- https://github.com/advisories/GHSA-27c6-wp53-387x
- https://nvd.nist.gov/vuln/detail/CVE-2026-58167
- https://github.com/ccfos/nightingale/commit/762819fbaa2350b73bce45bfaf6f8cf74b4abef8
- https://github.com/ccfos/nightingale/pull/3175
- https://github.com/ccfos/nightingale/issues/3173
- https://github.com/ccfos/nightingale/releases/tag/v9.0.0-beta.2
- https://www.vulncheck.com/advisories/nightingale-beta-2-datasource-credential-disclosure-to-low-privilege-users
CVE-2026-58167 · published · modified · JSON