—
GO-2026-6523
Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials in github.com/frain-dev/convoy
Quick fix
GO-2026-6523 — github.com/frain-dev/convoy: upgrade to the fixed version with the command below.
go get github.com/frain-dev/convoy@v0.9.3-0.20260724092134-1cc67cd16fb1Details
Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials in github.com/frain-dev/convoy
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/frain-dev/convoy
Introduced in:
0Fixed in: 0.9.3-0.20260724092134-1cc67cd16fb1Fix
go get github.com/frain-dev/convoy@v0.9.3-0.20260724092134-1cc67cd16fb1