VDB
KO

GO-2026-5356

Arcane has Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint in github.com/getarcaneapp/arcane/backend

Details

Arcane has Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint in github.com/getarcaneapp/arcane/backend

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/getarcaneapp/arcane/backend
Introduced in: 0 Fixed in: 1.17.3
Fix go get github.com/getarcaneapp/arcane/backend@v1.17.3

References