Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Goldish 3.47 and earlier allows attackers to inject code into Goldish

CVE-2026-25030 · published 7 months ago
Summary

An attacker can inject malicious code into Goldish by sending specially crafted data, potentially allowing them to take control of the system. This issue affects all versions of Goldish prior to 3.47. To protect your system, update to Goldish 3.47 or later.

Original advisory text
Deserialization of Untrusted Data vulnerability in park_of_ideas Goldish goldish allows Object Injection.This issue affects Goldish: from n/a through < 3.47.
Deserialization of Untrusted Data vulnerability in park_of_ideas Goldish goldish allows Object Injection.This issue affects Goldish: from n/a through < 3.47.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published25 Mar 2026
Updated4 Nov 2026
First seen26 Mar 2026
Sources
CVE-2026-25030 · NVD
Track software like this
Free during beta