—
GO-2026-5389
Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code Execution in github.com/enchant97/note-mark/backend
Quick fix
GO-2026-5389 — github.com/enchant97/note-mark/backend: upgrade to the fixed version with the command below.
go get github.com/enchant97/note-mark/backend@v0.0.0-20260501152243-db3f72bff780Details
Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code Execution in github.com/enchant97/note-mark/backend
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/enchant97/note-mark/backend
Introduced in:
0Fixed in: 0.0.0-20260501152243-db3f72bff780Fix
go get github.com/enchant97/note-mark/backend@v0.0.0-20260501152243-db3f72bff780