Affected by GO-2026-5090 and 4 other vulnerabilities

GO-2026-5090: zrok: Broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records in github.com/openziti/zrok

GO-2026-5118: zrok: Reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering in github.com/openziti/zrok

GO-2026-5203: zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write in github.com/openziti/zrok

GO-2026-5315: zrok copy writes attacker-controlled WebDAV paths outside the destination root in github.com/openziti/zrok

GO-2026-5329: zrok: Unauthenticated DoS via unbounded memory allocation in striped session cookie parsing in github.com/openziti/zrok

The highest tagged major version is v2.

emailUi

package

v1.1.13 Latest Latest Go to latest Published: Sep 28, 2026 License: Apache-2.0 Imports: 4 Imported by: 0

Details

This section is empty.

View Source

var FS embed.FS

This section is empty.

type Config struct {
	Host     string
	Port     int
	Username string
	Password string `cf:"+secret"`
	From     string
}

type WarningEmail struct {
	EmailAddress string
	Detail       string
	Version      string
}

func (we WarningEmail) MergeTemplate(filename string) (string, error)