Affected by GO-2026-5300
and 6 other vulnerabilities
GO-2026-5300: Algernon: Auto-refresh SSE event server binds to all interfaces with Access-Control-Allow-Origin: * and no authentication in github.com/xyproto/algernon
GO-2026-5385: Algernon: Single-file mode unconditionally enables debug mode in github.com/xyproto/algernon
GO-2026-5401: Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS in github.com/xyproto/algernon
GO-2026-5440: Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: * in github.com/xyproto/algernon
GO-2026-5460: Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir in github.com/xyproto/algernon
GO-2026-5772: Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon
GO-2026-5903: Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename in github.com/xyproto/algernon
ShellHelper executes the given shell command in the specified working directory.
It converts stdout and stderr into slices of strings (one entry per line) and then
uses convert.Strings2table to return two Lua tables. The exit code is also returned.
If the command is empty, both output tables are empty and exit code 1 is returned.
Affected by 
Documentation
¶
Source Files