cache

Jun 4, 2026 GO-2026-5292

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

May 25, 2026 GO-2026-5292

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

May 18, 2026 GO-2026-5292

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

May 17, 2026 GO-2026-5292 +1 more

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

May 17, 2026 GO-2026-5292 +1 more

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

Changes in this version

type Cache

+ func (c *Cache[T]) Invalidate()

+ type KeyedCache struct

+ func NewKeyed[K comparable, T any]() *KeyedCache[K, T]

+ func (c *KeyedCache[K, T]) GetOrFetch(ctx context.Context, key K, valid func(cached T) bool, ...) (T, error)

+ func (c *KeyedCache[K, T]) Invalidate(key K)

+ func (c *KeyedCache[K, T]) InvalidateAll()

May 13, 2026 GO-2026-5292 +2 more

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

  GO-2026-5476: Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend

Changes in this version

+ type TTL struct

+ func NewTTL[V any](ttl time.Duration) *TTL[V]

+ func (c *TTL[V]) DeleteFunc(fn func(key string, value V) bool)

+ func (c *TTL[V]) Get(key string) (V, bool)

+ func (c *TTL[V]) Put(key string, value V)

May 11, 2026 GO-2026-5292 +2 more

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

  GO-2026-5476: Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend

Apr 23, 2026 GO-2026-5220 +4 more

  GO-2026-5220: Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs in github.com/getarcaneapp/arcane/backend

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

  GO-2026-5476: Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5561: Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover in github.com/getarcaneapp/arcane/backend

Apr 23, 2026 GO-2026-5220 +4 more

  GO-2026-5220: Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs in github.com/getarcaneapp/arcane/backend

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

  GO-2026-5476: Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5561: Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover in github.com/getarcaneapp/arcane/backend

Apr 13, 2026 GO-2026-5220 +5 more

  GO-2026-5220: Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs in github.com/getarcaneapp/arcane/backend

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

  GO-2026-5340: Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) in github.com/getarcaneapp/arcane/backend

  GO-2026-5476: Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5561: Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover in github.com/getarcaneapp/arcane/backend

Apr 10, 2026 GO-2026-5220 +5 more

  GO-2026-5220: Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs in github.com/getarcaneapp/arcane/backend

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

  GO-2026-5340: Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) in github.com/getarcaneapp/arcane/backend

  GO-2026-5476: Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5561: Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover in github.com/getarcaneapp/arcane/backend

Apr 9, 2026 GO-2026-5220 +6 more

  GO-2026-5220: Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs in github.com/getarcaneapp/arcane/backend

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

  GO-2026-5340: Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) in github.com/getarcaneapp/arcane/backend

  GO-2026-5356: Arcane has Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5476: Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5561: Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover in github.com/getarcaneapp/arcane/backend

Apr 6, 2026 GO-2026-5220 +6 more

  GO-2026-5220: Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs in github.com/getarcaneapp/arcane/backend

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

  GO-2026-5340: Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) in github.com/getarcaneapp/arcane/backend

  GO-2026-5356: Arcane has Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5476: Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5561: Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover in github.com/getarcaneapp/arcane/backend

Apr 5, 2026 GO-2026-5220 +6 more

  GO-2026-5220: Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs in github.com/getarcaneapp/arcane/backend

  GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

  GO-2026-5308: Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend

  GO-2026-5340: Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) in github.com/getarcaneapp/arcane/backend

  GO-2026-5356: Arcane has Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5476: Arcane: Missing admin authorization on global variables endpoint in github.com/getarcaneapp/arcane/backend

  GO-2026-5561: Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover in github.com/getarcaneapp/arcane/backend

Changes in this version

+ type Cache struct

+ func New[T any](ttl time.Duration) *Cache[T]

+ func (c *Cache[T]) GetOrFetch(ctx context.Context, fetch func(ctx context.Context) (T, error)) (T, error)

+ type ErrStale struct

+ Err error

+ func (e *ErrStale) Error() string

+ func (e *ErrStale) Unwrap() error