—
GO-2026-5946
Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE in github.com/nuclio/nuclio
Quick fix
GO-2026-5946 — github.com/nuclio/nuclio: upgrade to the fixed version with the command below.
go get github.com/nuclio/nuclio@v0.0.0-20260601075854-3356b86a8bfaDetails
Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE in github.com/nuclio/nuclio
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/nuclio/nuclio
Introduced in:
0 Fixed in: 0.0.0-20260601075854-3356b86a8bfa Fix
go get github.com/nuclio/nuclio@v0.0.0-20260601075854-3356b86a8bfa