—
GO-2026-5811
turso-cli persists Turso platform JWT with world-readable (0o644) file permissions in github.com/tursodatabase/turso-cli
Quick fix
GO-2026-5811 — github.com/tursodatabase/turso-cli: upgrade to the fixed version with the command below.
go get github.com/tursodatabase/turso-cli@v1.0.26Details
turso-cli persists Turso platform JWT with world-readable (0o644) file permissions in github.com/tursodatabase/turso-cli
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/tursodatabase/turso-cli
Introduced in:
0Fixed in: 1.0.26Fix
go get github.com/tursodatabase/turso-cli@v1.0.26