—
GO-2026-6123
Cosmos-Server has an authentication bypass via forward-auth header smuggling on Constellation tunnel in github.com/azukaar/cosmos-server
Quick fix
GO-2026-6123 — github.com/azukaar/cosmos-server: upgrade to the fixed version with the command below.
go get github.com/azukaar/cosmos-server@v0.22.19Details
Cosmos-Server has an authentication bypass via forward-auth header smuggling on Constellation tunnel in github.com/azukaar/cosmos-server
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/azukaar/cosmos-server
Introduced in:
0Fixed in: 0.22.19Fix
go get github.com/azukaar/cosmos-server@v0.22.19