Algernon Cross-Site Scripting vulnerability
Modified: 12/18/2025
package
pkg:go/github.com/xyproto/algernon
Algernon Cross-Site Scripting vulnerability
Modified: 12/18/2025
Algernon: Auto-refresh SSE event server binds to all interfaces with Access-Control-Allow-Origin: * and no authentication
Modified: 6/25/2026
Algernon: Single-file mode unconditionally enables debug mode
Modified: 6/25/2026
Algernon engine and themes vulnerable to Cross-site Scripting
Modified: 11/8/2023
Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS
Modified: 6/25/2026
Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: *
Modified: 6/25/2026
Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir
Modified: 6/25/2026
Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename
Modified: 7/7/2026
Algernon: handler.lua discovery walks parent directories above the server root
Modified: 6/25/2026
Algernon Cross-Site Scripting vulnerability in github.com/xyproto/algernon
Modified: 3/3/2026
Algernon: Auto-refresh SSE event server binds to all interfaces with Access-Control-Allow-Origin: * and no authentication in github.com/xyproto/algernon
Modified: 6/25/2026
Algernon: Single-file mode unconditionally enables debug mode in github.com/xyproto/algernon
Modified: 6/25/2026
Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS in github.com/xyproto/algernon
Modified: 6/25/2026
Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: * in github.com/xyproto/algernon
Modified: 6/25/2026
Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir in github.com/xyproto/algernon
Modified: 6/25/2026
Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon
Modified: 6/25/2026
Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename in github.com/xyproto/algernon
Modified: 7/7/2026