cve.nowby Sazabi

GoPackage

github.com/wailsapp/wails/v2

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release: v2.17.1 (Nov 1, 2026): no advisory affects it
Newest unaffected release: v2.17.1 (Nov 1, 2026), the latest release
Advisories: 1 · 1 high

Releases: 155 since v2.0.0 (Sep 22, 2022)
Registry: pkg.go.dev
Releases read: Nov 8, 2026

Version timeline

CVE-2026-34157
Affects v2.0.0 to v2.12.0 (v2.13.0 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

CVE-2026-34157High 7.6
Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins
Affected: from 2.0.0, fixed in 2.13.0.
Fixed in v2.13.0 (released Jul 6, 2026, 122 days before disclosure).
The latest release, v2.17.1, is not affected.