VDB
Sign up
—

GO-2026-5825

gonic: Path Traversal in playlist `id` bypasses ownership check, enabling any user to read/delete other users' playlists in go.senan.xyz/gonic

Quick fix

GO-2026-5825 — go.senan.xyz/gonic: upgrade to the fixed version with the command below.

go get go.senan.xyz/gonic@v0.21.0

Details

gonic: Path Traversal in playlist `id` bypasses ownership check, enabling any user to read/delete other users' playlists in go.senan.xyz/gonic

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/go.senan.xyz/gonic
Introduced in: 0Fixed in: 0.21.0
Fixgo get go.senan.xyz/gonic@v0.21.0

References