- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 1 · 1 critical
- Registry
- pkg.go.dev
Advisories 1
- CVE-2026-53649Critical 9.6
Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE
Affected: fixed in 0.0.0-20260601151442-5c0ca35db828.