cve.nowby Sazabi

GoPackage

github.com/luskaner/ageLANServer/server

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release: v1.8.1 (May 17, 2025): affected by CVE-2026-107839
Newest unaffected release: Every release is affected by at least one advisory
Advisories: 1 · 1 high

Releases: 15 since v1.5.0 (Nov 3, 2024)
Registry: pkg.go.dev
Releases read: Nov 8, 2026

Version timeline

CVE-2026-107839
Affects v1.5.0-rc.1 to v1.8.1 (through the newest release)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

CVE-2026-107839High 7.5
ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service
Affected: fixed in 1.8.2-0.20260809203301-1dd40166a593.
No fix released. The advisory names 1.8.2-0.20260809203301-1dd40166a593 as the fix, which the registry doesn't have yet. The latest release, v1.8.1, is still affected.