~ / search / GHSA-8jqm-8qm3-qgqm

GHSA-8jqm-8qm3-qgqm

Algernon Cross-Site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-65754

Packages

EcosystemPackageAffectedFixed in
Go github.com/xyproto/algernon < 1.17.5 1.17.5

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.

References

External links from the advisory. They lead to third-party sites.