Affected by GO-2026-5090
and 4 other vulnerabilities
GO-2026-5090: zrok: Broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records in github.com/openziti/zrok
GO-2026-5118: zrok: Reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering in github.com/openziti/zrok
GO-2026-5203: zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write in github.com/openziti/zrok
GO-2026-5315: zrok copy writes attacker-controlled WebDAV paths outside the destination root in github.com/openziti/zrok
GO-2026-5329: zrok: Unauthenticated DoS via unbounded memory allocation in striped session cookie parsing in github.com/openziti/zrok
The highest tagged major version is
v2.
This package is not in the latest version of its module.
Documentation
¶
This section is empty.
This section is empty.
func SetRootDirName(name string)
SetRootDirName allows setting a custom name for the root directory. This should be called before any other environment operations.
This section is empty.
Source Files
Directories