—
GO-2026-5292
Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend
Details
Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/getarcaneapp/arcane/backend
Introduced in:
0 No fixed version published yet for github.com/getarcaneapp/arcane/backend (go modules). Pin to a known-safe version or switch to an alternative.