—

GO-2026-5890

Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect in github.com/kerberos-io/agent/machinery

상세

Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect in github.com/kerberos-io/agent/machinery

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

Go / github.com/kerberos-io/agent/machinery

최초 영향 버전: 0 수정 버전: 0.0.0-20260528173546-51f1a52e170f

수정 go get github.com/kerberos-io/agent/machinery@v0.0.0-20260528173546-51f1a52e170f

참고

https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j [ADVISORY]
https://github.com/kerberos-io/agent/commit/51f1a52e170f21c1264c6de1dc781d5b5e2a5d09 [WEB]