github.com/m1k1o/neko/server
Go2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/m1k1o/neko/serverpage 1 of 1
- CVE-2026-116679MEDIUMCVSS 5.4EG 5.4fixed in 0.0.0-20260805142851-395ca1a6f62b2026-10-27
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input beca…
- CVE-2026-39386HIGHCVSS 8.8EG 8.8fixed in 3.0.11 or 0.0.0-20260406184107-c54bcf1ee211, by version range2026-04-21
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immediately obtain full administrative control of the entire Neko instance (me…
Check whether github.com/m1k1o/neko/server is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/m1k1o/neko/server CVEs against the assets you own.
Book a Demo →