Vulnerability GHSA-2gw9-c2r2-f5qf
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 8.8
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
6 months ago
April 21, 2026 at 05:24 PM UTC
Neko has a Self-service Privilege Escalation for Authenticated Users
>=3.0.0 <3.0.11, >=0.0.0-20250322225643-212bf8a60756 <0.0.0-20260406184107-c54bcf1ee211
>=3.0.0 <3.0.11, >=0.0.0-20250322225643-212bf8a60756 <0.0.0-20260406184107-c54bcf1ee211
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
10 hours ago
Neko: Authorization bypass in legacy WebRTC input handling in github.com/m1k1o/neko/server
>=0.0.0-20250401220545-fe94c999c6af <0.0.0-20260805142851-395ca1a6f62b GO-2026-6869
>=0.0.0-20250401220545-fe94c999c6af <0.0.0-20260805142851-395ca1a6f62b GO-2026-6869
Medium Risk
9 days ago
Neko: Authorization bypass in legacy WebRTC input handling
>=0.0.0-20250401220545-fe94c999c6af <0.0.0-20260805142851-395ca1a6f62b GHSA-5cp7-fp4j-wwcv
>=0.0.0-20250401220545-fe94c999c6af <0.0.0-20260805142851-395ca1a6f62b GHSA-5cp7-fp4j-wwcv
Unknown
5 months ago
Neko has a Self-service Privilege Escalation for Authenticated Users in github.com/m1k1o/neko/server
>=0.0.0-20250326225119-51bbad7650d3 <0.0.0-20260406184107-c54bcf1ee211 GO-2026-4960
>=0.0.0-20250326225119-51bbad7650d3 <0.0.0-20260406184107-c54bcf1ee211 GO-2026-4960
Impacted packages
Timeline
Published
6 months ago
April 21, 2026 at 05:24 PM UTC
Fixed (v0.0.0-20260406184107-c54bcf1ee211)
7 months ago
April 06, 2026 at 06:41 PM UTC
Last Modified
4 months ago
June 09, 2026 at 10:52 AM UTC