LOWGo
GHSA-q82r-2j7m-9rv4· CVE-2025-54799, GO-2025-3847github.com/go-acme/lego/v4/acme/api does not enforce HTTPS
Modified: 9/10/2026
package
Go/github.com/go-acme/lego
pkg:go/github.com/go-acme/lego
HIGH8.8Go
GHSA-qqx8-2xmm-jrv8· CVE-2026-40611, GO-2026-5593ACME Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider
Modified: 9/10/2026