github.com/zhenorzz/goploy
Go3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/zhenorzz/goploypage 1 of 1
- CVE-2026-114665MEDIUMCVSS 6.5EG 6.52026-10-22
Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files. Attackers with repository write access can commit a sy…
- CVE-2026-53552CRITICALCVSS 9.6EG 9.62026-07-07
Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile, Project.EditFile, Project.RemoveFile, and Project.Edit in cmd/server/api/project/handler.go accept a project or project-file row id from …
- CVE-2026-53553HIGHCVSS 7.7EG 7.72026-07-07
Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/fileDiff (File Compare), when handling file paths provided by t…
Check whether github.com/zhenorzz/goploy is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/zhenorzz/goploy CVEs against the assets you own.
Book a Demo →