VDB
Sign up

GO-2026-6451

webhookd: Unrestricted HTTP Header to Shell Variable Injection in github.com/ncarlier/webhookd

Quick fix

GO-2026-6451 — github.com/ncarlier/webhookd: upgrade to the fixed version with the command below.

go get github.com/ncarlier/webhookd@v1.22.0

Details

webhookd: Unrestricted HTTP Header to Shell Variable Injection in github.com/ncarlier/webhookd

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/ncarlier/webhookd
Introduced in: 0Fixed in: 1.22.0
Fixgo get github.com/ncarlier/webhookd@v1.22.0

References