VDB
Sign up
—

GO-2026-5956

OpenRun: Redirect URL validation bypass using  //host  paths leads to Open Redirect in github.com/openrundev/openrun

Quick fix

GO-2026-5956 — github.com/openrundev/openrun: upgrade to the fixed version with the command below.

go get github.com/openrundev/openrun@v0.17.7

Details

OpenRun: Redirect URL validation bypass using  //host  paths leads to Open Redirect in github.com/openrundev/openrun

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/openrundev/openrun
Introduced in: 0Fixed in: 0.17.7
Fixgo get github.com/openrundev/openrun@v0.17.7

References