VDB
Sign up
—

GO-2026-6135

openhole-server vulnerable to path traversal via URL-decoded request path in github.com/bablilayoub/openhole

Quick fix

GO-2026-6135 — github.com/bablilayoub/openhole: upgrade to the fixed version with the command below.

go get github.com/bablilayoub/openhole@v0.1.2

Details

openhole-server vulnerable to path traversal via URL-decoded request path in github.com/bablilayoub/openhole

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/bablilayoub/openhole
Introduced in: 0Fixed in: 0.1.2
Fixgo get github.com/bablilayoub/openhole@v0.1.2

References