CRITICAL9.8Go
GHSA-pqhx-w72w-m393· CVE-2026-39087, GO-2026-5551ntfy.sh allows a remote attacker to execute arbitrary code via the parseActions function
Modified: 6/25/2026
package
pkg:go/heckel.io/ntfy/v2
ntfy.sh allows a remote attacker to execute arbitrary code via the parseActions function
Modified: 6/25/2026
ntfy.sh allows a remote attacker to execute arbitrary code via the parseActions function in heckel.io/ntfy
Modified: 6/25/2026