VDB
KO

GO-2026-4862

OpenBao has Reflected XSS in its OIDC authentication error message in github.com/openbao/openbao

Quick fix

GO-2026-4862 — github.com/openbao/openbao: upgrade to the fixed version with the command below.

go get github.com/openbao/openbao@v0.0.0-20260325133417-6e2b2dd84f0e

Details

OpenBao has Reflected XSS in its OIDC authentication error message in github.com/openbao/openbao

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/openbao/openbao
Introduced in: 0 Fixed in: 0.0.0-20260325133417-6e2b2dd84f0e
Fix go get github.com/openbao/openbao@v0.0.0-20260325133417-6e2b2dd84f0e

References