| id: GO-2026-5308 | |
| modules: | |
| - module: github.com/getarcaneapp/arcane/backend | |
| versions: | |
| - fixed: 1.19.4 | |
| vulnerable_at: 1.19.3 | |
| summary: |- | |
| Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include | |
| Directives in github.com/getarcaneapp/arcane/backend | |
| cves: | |
| - CVE-2026-47179 | |
| ghsas: | |
| - GHSA-c3px-h233-h6fq | |
| references: | |
| - advisory: https://github.com/getarcaneapp/arcane/security/advisories/GHSA-c3px-h233-h6fq | |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-47179 | |
| - web: https://github.com/getarcaneapp/arcane/commit/b6cbffabf61dbc3f12a28d3b5830e3c6b7e67daf | |
| source: | |
| id: GHSA-c3px-h233-h6fq | |
| created: 2026-06-25T02:38:45.011420177-04:00 | |
| review_status: UNREVIEWED |