CVE-2026-73843
2 advisories.
Go/github.com/openchoreo/openchoreo CVE-2026-73843: critical 9.6, EPSS 0.48%
OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs
Action: Upgrade github.com/openchoreo/openchoreo to 1.0.2 or later.
go get github.com/openchoreo/openchoreo@v1.0.2go get github.com/openchoreo/openchoreo@v1.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.2 | - |
| 1.1.0 | 1.1.2 | - |
Fixed versions
| 1.0.2 | 1.1.2 |
Sources
- osv: GHSA-qh9r-j7rp-4x2m
- https://github.com/openchoreo/openchoreo/security/advisories/GHSA-qh9r-j7rp-4x2m
- https://nvd.nist.gov/vuln/detail/CVE-2026-73843
- https://github.com/openchoreo/openchoreo/pull/4122
- https://github.com/openchoreo/openchoreo/commit/047d80ddc63b4b4b9dd67044d5cffcdbd77685ce
- https://github.com/openchoreo/openchoreo/commit/0aa0ffe1623bd8eb4235cb2a5854336695953c3a
- https://github.com/openchoreo/openchoreo/commit/b42eeb0f5dce95195a9781d7c5a1fe9e38f5da8f
- https://github.com/openchoreo/openchoreo
- https://github.com/openchoreo/openchoreo/releases/tag/v1.0.2
- https://github.com/openchoreo/openchoreo/releases/tag/v1.1.2
- https://github.com/openchoreo/openchoreo/releases/tag/v1.2.0
CVE-2026-73843 · published · modified · JSON
Go/github.com/openchoreo/openchoreo CVE-2026-73843: unknown, EPSS 0.48%
OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs in github.com/openchoreo/openchoreo
Action: Upgrade github.com/openchoreo/openchoreo to 1.0.2 or later.
go get github.com/openchoreo/openchoreo@v1.0.2go get github.com/openchoreo/openchoreo@v1.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.2 | - |
| 1.1.0 | 1.1.2 | - |
Fixed versions
| 1.0.2 | 1.1.2 |
Sources
- osv: GO-2026-6362
- https://github.com/openchoreo/openchoreo/security/advisories/GHSA-qh9r-j7rp-4x2m
- https://nvd.nist.gov/vuln/detail/CVE-2026-73843
- https://github.com/openchoreo/openchoreo/commit/047d80ddc63b4b4b9dd67044d5cffcdbd77685ce
- https://github.com/openchoreo/openchoreo/commit/0aa0ffe1623bd8eb4235cb2a5854336695953c3a
- https://github.com/openchoreo/openchoreo/commit/b42eeb0f5dce95195a9781d7c5a1fe9e38f5da8f
- https://github.com/openchoreo/openchoreo/pull/4122
- https://github.com/openchoreo/openchoreo/releases/tag/v1.0.2
- https://github.com/openchoreo/openchoreo/releases/tag/v1.1.2
- https://github.com/openchoreo/openchoreo/releases/tag/v1.2.0
CVE-2026-73843 · published · modified · JSON