VDB
KO

GO-2026-5811

turso-cli persists Turso platform JWT with world-readable (0o644) file permissions in github.com/tursodatabase/turso-cli

Details

turso-cli persists Turso platform JWT with world-readable (0o644) file permissions in github.com/tursodatabase/turso-cli

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/tursodatabase/turso-cli
Introduced in: 0 Fixed in: 1.0.26
Fix go get github.com/tursodatabase/turso-cli@v1.0.26

References