—
GO-2026-6537
nginx ignition has TOTP Reuse During Validity Window in github.com/lucasdillmann/nginx-ignition
Quick fix
GO-2026-6537 — github.com/lucasdillmann/nginx-ignition: upgrade to the fixed version with the command below.
go get github.com/lucasdillmann/nginx-ignition@v0.0.0-20260328015550-8d35e1eb5dd6Details
nginx ignition has TOTP Reuse During Validity Window in github.com/lucasdillmann/nginx-ignition
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/lucasdillmann/nginx-ignition
Introduced in:
0.0.0-20260217145239-1cbfae0296f1Fixed in: 0.0.0-20260328015550-8d35e1eb5dd6Fix
go get github.com/lucasdillmann/nginx-ignition@v0.0.0-20260328015550-8d35e1eb5dd6References
- https://github.com/lucasdillmann/nginx-ignition/security/advisories/GHSA-hf33-q6cf-c66f[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-61630[ADVISORY]
- https://github.com/lucasdillmann/nginx-ignition/commit/1cbfae0296f1b186158f5a294ec484060e00102e[FIX]
- https://github.com/lucasdillmann/nginx-ignition/commit/8d35e1eb5dd6a40fef94a45511fe08b0603af107[FIX]
- https://github.com/lucasdillmann/nginx-ignition/pull/104[FIX]
- https://github.com/lucasdillmann/nginx-ignition/releases/tag/2.35.1[WEB]
- https://github.com/pquerna/otp/issues/61[WEB]