GO-2026-5772

vendorUSosv

Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon

view advisory published 2026-06-25Licence: per source

Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-45721US——
Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks up…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan