—
GO-2026-4680
Anytype Heart's gRPC API client challenge verification can be bypassed on localhost in github.com/anyproto/anytype-cli
Quick fix
GO-2026-4680 — github.com/anyproto/anytype-cli: upgrade to the fixed version with the command below.
go get github.com/anyproto/anytype-cli@v0.1.11Details
Anytype Heart's gRPC API client challenge verification can be bypassed on localhost in github.com/anyproto/anytype-cli
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/anyproto/anytype-cli
Introduced in:
0Fixed in: 0.1.11Fix
go get github.com/anyproto/anytype-cli@v0.1.11Go/github.com/anyproto/anytype-heart
Introduced in:
0Fixed in: 0.48.4Fix
go get github.com/anyproto/anytype-heart@v0.48.4