Affected by GO-2026-5113
and 3 other vulnerabilities
GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub
GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub
GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub
GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub
directory
Version:
v0.21.0
Opens a new window with list of versions in this module.
Published: Nov 28, 2025
License: Apache-2.0
Opens a new window with license information.
Directories
¶
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Package requests defines structures to represent requests' bodies from API.
|
Package requests defines structures to represent requests' bodies from API. |
|
|
|
Click to show internal directories.
Click to hide internal directories.