—
GO-2026-6273
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis
Quick fix
GO-2026-6273 — github.com/runatlantis/atlantis: upgrade to the fixed version with the command below.
go get github.com/runatlantis/atlantis@v0.45.0Details
Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation in github.com/runatlantis/atlantis
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/runatlantis/atlantis
Introduced in:
0.19.8 Fixed in: 0.45.0 Fix
go get github.com/runatlantis/atlantis@v0.45.0 References
- https://github.com/runatlantis/atlantis/security/advisories/GHSA-26w5-6g95-gj28 [ADVISORY]
- https://github.com/runatlantis/atlantis/commit/ea4e4ceebf8b387d015fff7ed8a7fcca33279afe [FIX]
- https://github.com/runatlantis/atlantis/pull/6254 [FIX]
- https://github.com/runatlantis/atlantis/releases/tag/v0.45.0 [WEB]