CVE-2026-73087
2 advisories.
Go/github.com/amir20/dozzle CVE-2026-73087: low, EPSS 0.46%
Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher
Action: Upgrade github.com/amir20/dozzle to 1.29.1-0.20260804193351-8cf7ccd5ee04 or later.
go get github.com/amir20/dozzle@v1.29.1-0.20260804193351-8cf7ccd5ee04Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.29.1-0.20260804193351-8cf7ccd5ee04 | - |
Fixed versions
| 1.29.1-0.20260804193351-8cf7ccd5ee04 |
Sources
- osv: GHSA-p2w3-6x73-2f6x
- https://github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6x
- https://nvd.nist.gov/vuln/detail/CVE-2026-73087
- https://github.com/amir20/dozzle/pull/4887
- https://github.com/amir20/dozzle/commit/8cf7ccd5ee041ecaea92b49951793d4d2393761f
- https://github.com/amir20/dozzle
- https://github.com/amir20/dozzle/releases/tag/v10.6.15
CVE-2026-73087 · published · modified · JSON
Go/github.com/amir20/dozzle CVE-2026-73087: unknown, EPSS 0.46%
Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher in github.com/amir20/dozzle
Action: Upgrade github.com/amir20/dozzle to 1.29.1-0.20260804193351-8cf7ccd5ee04 or later.
go get github.com/amir20/dozzle@v1.29.1-0.20260804193351-8cf7ccd5ee04Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.29.1-0.20260804193351-8cf7ccd5ee04 | - |
Fixed versions
| 1.29.1-0.20260804193351-8cf7ccd5ee04 |
Sources
- osv: GO-2026-6440
- https://github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6x
- https://nvd.nist.gov/vuln/detail/CVE-2026-73087
- https://github.com/amir20/dozzle/commit/8cf7ccd5ee041ecaea92b49951793d4d2393761f
- https://github.com/amir20/dozzle/pull/4887
- https://github.com/amir20/dozzle/releases/tag/v10.6.15
CVE-2026-73087 · published · modified · JSON