—
GO-2026-5460
Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir in github.com/xyproto/algernon
Quick fix
GO-2026-5460 — github.com/xyproto/algernon: upgrade to the fixed version with the command below.
go get github.com/xyproto/algernon@v1.17.8Details
Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir in github.com/xyproto/algernon
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/xyproto/algernon
Introduced in:
0Fixed in: 1.17.8Fix
go get github.com/xyproto/algernon@v1.17.8