VDB
KO

GO-2026-5054

Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection in github.com/jpillora/chisel

Details

Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection in github.com/jpillora/chisel

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/jpillora/chisel
Introduced in: 0 Fixed in: 1.11.5
Fix go get github.com/jpillora/chisel@v1.11.5

References