| id: GO-2026-6012 | |
| modules: | |
| - module: github.com/nuclio/nuclio | |
| non_go_versions: | |
| - fixed: 1.16.5 | |
| vulnerable_at: 1.14.2 | |
| summary: |- | |
| Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file | |
| write in Dashboard container in github.com/nuclio/nuclio | |
| cves: | |
| - CVE-2026-52832 | |
| ghsas: | |
| - GHSA-wpcj-rmv4-86qg | |
| references: | |
| - advisory: https://github.com/nuclio/nuclio/security/advisories/GHSA-wpcj-rmv4-86qg | |
| - fix: https://github.com/nuclio/nuclio/commit/2a55d3a8bd4d49226cb4742020303f5bf2a0931d | |
| - fix: https://github.com/nuclio/nuclio/pull/4143 | |
| - web: https://github.com/nuclio/nuclio/releases/tag/1.16.5 | |
| source: | |
| id: GHSA-wpcj-rmv4-86qg | |
| created: 2026-07-17T13:12:37.152813427-04:00 | |
| review_status: UNREVIEWED |