—
GO-2026-4960
Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server
Quick fix
GO-2026-4960 — github.com/m1k1o/neko/server: upgrade to the fixed version with the command below.
go get github.com/m1k1o/neko/server@v0.0.0-20260406184107-c54bcf1ee211Details
Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/m1k1o/neko/server
Introduced in:
0.0.0-20250326225119-51bbad7650d3Fixed in: 0.0.0-20260406184107-c54bcf1ee211Fix
go get github.com/m1k1o/neko/server@v0.0.0-20260406184107-c54bcf1ee211References
- https://github.com/m1k1o/neko/security/advisories/GHSA-2gw9-c2r2-f5qf[ADVISORY]
- https://github.com/m1k1o/neko/commit/6b561feb9016badea99ae7305091c0ff55e1d114[WEB]
- https://github.com/m1k1o/neko/commit/c54bcf1ee211e28104a2bb6db59583a39c4a4d6e[WEB]
- https://github.com/m1k1o/neko/releases/tag/v3.0.11[WEB]
- https://github.com/m1k1o/neko/releases/tag/v3.1.2[WEB]