Skip to content

CVE record · 1 source

CVE-2026-68548

CVSS 9.4

Algernon is a small self-contained pure-Go web server.

Vendor: Xyproto
Product: algernon
CVSS v3.1: 9.4 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Weakness: CWE-178, CWE-863
Exposure class: Operating system

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

49

CVE NVD 2h ago

Algernon is a small self-contained pure-Go web server.

Algernon is a small self-contained pure-Go web server. Prior to version 1.17.10, Algernon's URL-prefix authorization gate matches its protected prefixes (/admin, /repo, /data) with case-sensitive strings.HasPrefix, while the…

CVSS 9.4 Fix available CVE-2026-68548 Xyproto