pkg:Go/github.com/xyproto/algernon

All known vulnerabilities

• CRITICAL9.0CVE-2026-45721Algernon: handler.lua discovery walks parent directories above the server root
  from 0, < 1.17.7
• HIGH7.5CVE-2026-45728Algernon: Single-file mode unconditionally enables debug mode
  from 0, < 1.17.7
• MEDIUM6.1CVE-2023-26131Algernon engine and themes vulnerable to Cross-site Scripting
  from 0, <= 1.15.2
• MEDIUM4.3Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: *
  from 0, < 1.17.7
• MEDIUM4.3Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS
  from 0, < 1.17.7
• —Algernon Cross-Site Scripting vulnerability in github.com/xyproto/algernon
  from 0, < 1.17.5
• —Algernon Cross-Site Scripting vulnerability in github.com/xyproto/algernon
  from 0, < 1.17.5