Skip to content
OpenAdvisories

Package · Go

github.com/xyproto/algernon

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-45721

    Algernon: handler.lua discovery walks parent directories above the server root

    Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks upward through parent directories — past the configured server root — looking for…

    xyproto algernon github.com/xyproto/algernon Go