Algernon Cross-Site Scripting vulnerability

MEDIO 6.1CVE-2025-65754 · GHSA-8jqm-8qm3-qgqm · GO-2025-4228 · Published 10/12/2025 · updated 04/11/2026

In breve

CVE-2025-65754 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda github.com/xyproto/algernon, algernon (algernon project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.44%, superiore al 38.4% delle vulnerabilità.
Correzione: aggiornare a 1.17.5 o successiva.

Package	Affected versions	Patched versions
github.com/xyproto/algernon Go	`< 1.17.5`	`1.17.5`
algernon algernon_project	`= 1.17.4`	No fix yet

Cross-site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.

NVD description

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.17.5

1.17.5

= 1.17.4

No fix yet

Description

Cross-site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.

NVD description

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.

Altre vulnerabilità di github.com/xyproto/algernon

Vedi tutto →