—
GO-2026-5827
gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host in go.senan.xyz/gonic
Quick fix
GO-2026-5827 — go.senan.xyz/gonic: upgrade to the fixed version with the command below.
go get go.senan.xyz/gonic@v0.21.0Details
gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host in go.senan.xyz/gonic
Are you affected?
Enter the version of the package you're using.