CRITICAL9.8Go
GHSA-pqhx-w72w-m393· CVE-2026-39087, GO-2026-5551ntfy.sh allows a remote attacker to execute arbitrary code via the parseActions function
Modified: 6/25/2026
package
Go/heckel.io/ntfy/v2
pkg:go/heckel.io/ntfy/v2
—Go
GO-2026-5551· CVE-2026-39087, GHSA-pqhx-w72w-m393ntfy.sh allows a remote attacker to execute arbitrary code via the parseActions function in heckel.io/ntfy
Modified: 6/25/2026