—
GO-2026-5181
Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream in github.com/tilt-dev/tilt
Quick fix
GO-2026-5181 — github.com/tilt-dev/tilt: upgrade to the fixed version with the command below.
go get github.com/tilt-dev/tilt@v0.37.4Details
Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream in github.com/tilt-dev/tilt
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/tilt-dev/tilt
Introduced in:
0.24.0Fixed in: 0.37.4Fix
go get github.com/tilt-dev/tilt@v0.37.4