—
GO-2026-5210
Nginx-UI: Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints in github.com/0xJacky/Nginx-UI
Quick fix
GO-2026-5210 — github.com/0xJacky/Nginx-UI: upgrade to the fixed version with the command below.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260316053337-1a9cd29a3082Details
Nginx-UI: Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints in github.com/0xJacky/Nginx-UI
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/0xJacky/Nginx-UI
Introduced in:
0Fixed in: 1.9.10-0.20260316053337-1a9cd29a3082Fix
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260316053337-1a9cd29a3082