Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
cleanstart/nodetaint can be tricked to run malicious code
published 4 days ago
Summary
The nodetaint library used for handling HTTP requests in Go can be exploited to execute unwanted code on your server. This could let attackers take control of the affected application. Update the library to the latest version or replace it with a safer alternative as soon as possible.
What to do
- Update cleanstart nodetaint to version 0.0.4-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | nodetaint |
< 0.0.4-r1 Fix: upgrade to 0.0.4-r1
|
Original advisory text
net/http in Go before 1
Security vulnerability affects the nodetaint package. net/http in Go before 1.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-RB71141 · OSV
Track software like this
Free during beta