—
GO-2026-4844
Zoraxy: Authenticated Path Traversal in Config Import leads to RCE in github.com/tobychui/zoraxy
Quick fix
GO-2026-4844 — github.com/tobychui/zoraxy: upgrade to the fixed version with the command below.
go get github.com/tobychui/zoraxy@v3.3.2+incompatibleDetails
Zoraxy: Authenticated Path Traversal in Config Import leads to RCE in github.com/tobychui/zoraxy
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/tobychui/zoraxy
Introduced in:
0Fixed in: 3.3.2+incompatibleFix
go get github.com/tobychui/zoraxy@v3.3.2+incompatible