—
GO-2026-4862
OpenBao has Reflected XSS in its OIDC authentication error message in github.com/openbao/openbao
Quick fix
GO-2026-4862 — github.com/openbao/openbao: upgrade to the fixed version with the command below.
go get github.com/openbao/openbao@v0.0.0-20260325133417-6e2b2dd84f0e Details
OpenBao has Reflected XSS in its OIDC authentication error message in github.com/openbao/openbao
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/openbao/openbao
Introduced in:
0 Fixed in: 0.0.0-20260325133417-6e2b2dd84f0e Fix
go get github.com/openbao/openbao@v0.0.0-20260325133417-6e2b2dd84f0e