PT-2026-29936 · Go · Github.Com/Fleetdm/Fleet/V4

Publicado 2026-04-02 · Atualizado 2026-04-02

OSV

Fleet's unbounded request body read allows remote Denial of Service in github.com/fleetdm/fleet.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/fleetdm/fleet/v4 before v4.43.5-0.20260113202849-bbc1aef2987d.

Identificadores relacionados

GO-2026-4889

Produtos afetados

Github.Com/Fleetdm/Fleet/V4

Referências · 3

• https://github.com/fleetdm/fleet/security/advisories/GHSA-99hj-44vg-hfcp · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-26061 · Nota de Segurança
• https://osv.dev/vulnerability/GO-2026-4889 · Aviso do Fabricante