Affected by GO-2026-5292 and 2 other vulnerabilities

GO-2026-5292: Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter in github.com/getarcaneapp/arcane/backend

GO-2026-6806: Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof` in github.com/getarcaneapp/arcane/backend

GO-2026-6807: Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check) in github.com/getarcaneapp/arcane/backend

The highest tagged major version is v2.

crypto

package

v1.20.0 Latest Latest Go to latest Published: Jun 4, 2026 License: BSD-3-Clause Imports: 12 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/getarcaneapp/arcane

Links

Open Source Insights

Documentation ¶

Index ¶

func Decrypt(ciphertext string) (string, error)
func Encrypt(plaintext string) (string, error)
func InitEncryption(cfg *Config)
type Config

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Decrypt ¶

func Decrypt(ciphertext string) (string, error)

Decrypt decrypts a base64 encoded ciphertext string using AES-GCM

func Encrypt ¶

func Encrypt(plaintext string) (string, error)

Encrypt encrypts a plaintext string using AES-GCM

func InitEncryption ¶

func InitEncryption(cfg *Config)

InitEncryption initializes the global encryption key based on configuration

Types ¶

type Config ¶

type Config struct {
	EncryptionKey string
	Environment   string
	AgentMode     bool
}

Source Files ¶

View all Source files

encryption.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL