—
GO-2026-5947
Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE in github.com/BishopFox/joro
Quick fix
GO-2026-5947 — github.com/BishopFox/joro: upgrade to the fixed version with the command below.
go get github.com/BishopFox/joro@v0.0.0-20260601151442-5c0ca35db828Details
Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE in github.com/BishopFox/joro
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/BishopFox/joro
Introduced in:
0 Fixed in: 0.0.0-20260601151442-5c0ca35db828 Fix
go get github.com/BishopFox/joro@v0.0.0-20260601151442-5c0ca35db828