—
GO-2026-6124
Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens in github.com/azukaar/cosmos-server
Quick fix
GO-2026-6124 — github.com/azukaar/cosmos-server: upgrade to the fixed version with the command below.
go get github.com/azukaar/cosmos-server@v0.22.19Details
Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens in github.com/azukaar/cosmos-server
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/azukaar/cosmos-server
Introduced in:
0.22.18Fixed in: 0.22.19Fix
go get github.com/azukaar/cosmos-server@v0.22.19