blob: 0cc717246e7dfdbe9281524797c592e8e517ab78 [file] [edit]
id: GO-2026-5476
modules:
- module: github.com/getarcaneapp/arcane/backend
versions:
- fixed: 1.19.2
vulnerable_at: 1.19.1
summary: 'Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend'
cves:
- CVE-2026-47125
ghsas:
- GHSA-jpjh-jm2p-39hh
references:
- advisory: https://github.com/getarcaneapp/arcane/security/advisories/GHSA-jpjh-jm2p-39hh
- advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-47125
source:
id: GHSA-jpjh-jm2p-39hh
created: 2026-06-25T15:46:22.140129745-04:00
review_status: UNREVIEWED