—
GO-2026-5680
ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub
Quick fix
GO-2026-5680 — github.com/shellhub-io/shellhub: upgrade to the fixed version with the command below.
go get github.com/shellhub-io/shellhub@v0.24.2Details
ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/shellhub-io/shellhub
Introduced in:
0Fixed in: 0.24.2Fix
go get github.com/shellhub-io/shellhub@v0.24.2