github.com/getarcaneapp/arcane/backend/v2
Go2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/getarcaneapp/arcane/backend/v2page 1 of 1
- CVE-2026-96627HIGHCVSS 8.8EG 8.8fixed in 2.6.02026-10-16
Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in backend/api/handlers/users.go sets PasswordHash for any target without comparing caller and target privilege. A holder of d…
- CVE-2026-96628MEDIUMCVSS 4.3EG 4.3fixed in 2.11.02026-10-16
Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.0, AuthMiddleware.managerAuth accepts X-Arcane-Agent-Token credentials and the environment-token branch calls next before the AdminRequired…
Check whether github.com/getarcaneapp/arcane/backend/v2 is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/getarcaneapp/arcane/backend/v2 CVEs against the assets you own.
Book a Demo →