CRITICALGo
GHSA-2g9v-7mr5-fgjg· CVE-2026-42300, GO-2026-4988DevGuard has an unauthenticated identity assertion via `X-Admin-Token` header
Modified: 5/20/2026
package
Go/github.com/l3montree-dev/devguard
pkg:go/github.com/l3montree-dev/devguard
HIGHGo
GHSA-6p54-fw2f-q7gf· CVE-2026-48089, GO-2026-5183DevGuard has improper authorization on public assets
Modified: 7/15/2026
—Go
GO-2026-4988· CVE-2026-42300, GHSA-2g9v-7mr5-fgjgDevGuard has an unauthenticated identity assertion via `X-Admin-Token` header in github.com/l3montree-dev/devguard
Modified: 5/20/2026
—Go
GO-2026-5183· CVE-2026-48089, GHSA-6p54-fw2f-q7gfDevGuard has improper authorization on public assets in github.com/l3montree-dev/devguard
Modified: 6/25/2026