| id: GO-2026-5947 | |
| modules: | |
| - module: github.com/BishopFox/joro | |
| versions: | |
| - fixed: 0.0.0-20260601151442-5c0ca35db828 | |
| summary: 'Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE in github.com/BishopFox/joro' | |
| cves: | |
| - CVE-2026-53649 | |
| ghsas: | |
| - GHSA-xqhv-chqm-fhcc | |
| references: | |
| - advisory: https://github.com/BishopFox/joro/security/advisories/GHSA-xqhv-chqm-fhcc | |
| notes: | |
| - fix: 'github.com/BishopFox/joro: could not add vulnerable_at: cannot auto-guess when fixed version is 0.0.0 pseudo-version' | |
| source: | |
| id: GHSA-xqhv-chqm-fhcc | |
| created: 2026-07-17T13:18:57.173405632-04:00 | |
| review_status: UNREVIEWED |