Skip to content
OpenAdvisories

Package · Go

github.com/ccfos/nightingale/v4

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2026-58167

    Nightingale < 9.0.0-beta.2 - Datasource Credential Disclosure to Low-Privilege Users

    Nightingale (n9e) before 9.0.0-beta.2 exposes full datasource configurations, including plaintext database passwords, HTTP bearer tokens, HTTP basic-auth passwords, and mTLS client keys, to any authenticated low-privilege (Standard role) user through POST /ap…

    ccfos nightingale github.com/ccfos/nightingale github.com/ccfos/nightingale/v5 Go