{"schema":"vulnpedia.research/1","cve":"CVE-2026-107813","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h246-wpgf-vmq5","tags":["x_refsource_CONFIRM","Vendor Advisory","WEB","ADVISORY"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:48:44.612Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:48:44.612Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h246-wpgf-vmq5"},{"source":"nvd","sourceId":"CVE-2026-107813","modified":"2026-10-20T14:32:08.007","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h246-wpgf-vmq5"},{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h246-wpgf-vmq5"},{"source":"go","sourceId":"GO-2026-6706","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h246-wpgf-vmq5"},{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","modified":"2026-10-19T21:40:57.819406134Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h246-wpgf-vmq5"}]},{"url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954","tags":["x_refsource_MISC","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:48:44.612Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:48:44.612Z","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"nvd","sourceId":"CVE-2026-107813","modified":"2026-10-20T14:32:08.007","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"go","sourceId":"GO-2026-6706","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","modified":"2026-10-19T21:40:57.819406134Z","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"}]},{"url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0","tags":["x_refsource_MISC","Release Notes","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:48:44.612Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:48:44.612Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"nvd","sourceId":"CVE-2026-107813","modified":"2026-10-20T14:32:08.007","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"go","sourceId":"GO-2026-6706","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","modified":"2026-10-19T21:40:57.819406134Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-h246-wpgf-vmq5","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","modified":"2026-10-19T21:40:57.819406134Z","origins":[{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","url":"https://osv.dev/vulnerability/GHSA-h246-wpgf-vmq5"},{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","modified":"2026-10-19T21:40:57.819406134Z","url":"https://osv.dev/vulnerability/GHSA-h246-wpgf-vmq5"}]},{"url":"https://github.com/0xJacky/nginx-ui","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","modified":"2026-10-19T21:40:57.819406134Z","origins":[{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","url":"https://github.com/0xJacky/nginx-ui"},{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","modified":"2026-10-19T21:40:57.819406134Z","url":"https://github.com/0xJacky/nginx-ui"}]},{"url":"https://osv.dev/vulnerability/GO-2026-6706","tags":["ADVISORY"],"source":"go","sourceId":"GO-2026-6706","modified":"2026-10-19T21:31:39.266611356Z","origins":[{"source":"go","sourceId":"GO-2026-6706","url":"https://osv.dev/vulnerability/GO-2026-6706"},{"source":"go","sourceId":"GO-2026-6706","modified":"2026-10-19T21:31:39.266611356Z","url":"https://osv.dev/vulnerability/GO-2026-6706"}]},{"source":"euvd","sourceId":"EUVD-2026-95898","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95898","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95898","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95898"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","url":"https://osv.dev/vulnerability/GHSA-h246-wpgf-vmq5","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20250517140552-daee3ac7ade1"},{"fixed":"1.9.10-0.20260728074433-a3999bd78a3b"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-h246-wpgf-vmq5/GHSA-h246-wpgf-vmq5.json"},"modified":"2026-10-19T21:40:57.819406134Z","origins":[{"source":"ghsa","sourceId":"GHSA-h246-wpgf-vmq5","modified":"2026-10-19T21:40:57.819406134Z","url":"https://osv.dev/vulnerability/GHSA-h246-wpgf-vmq5"}]},{"source":"go","sourceId":"GO-2026-6706","url":"https://osv.dev/vulnerability/GO-2026-6706","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20250517140552-daee3ac7ade1"},{"fixed":"1.9.10-0.20260728074433-a3999bd78a3b"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-6706.json"},"modified":"2026-10-19T21:31:39.266611356Z","origins":[{"source":"go","sourceId":"GO-2026-6706","modified":"2026-10-19T21:31:39.266611356Z","url":"https://osv.dev/vulnerability/GO-2026-6706"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}