github.com/azukaar/cosmos-server vulnerabilities (Go)

2 vulnerabilities.

• github.com/azukaar/cosmos-server Go Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server CVE-2026-49446 Fix available 6.1 MediumJuly 28, 2026
• github.com/azukaar/cosmos-server Go Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens CVE-2026-49447 Fix available 5.3 MediumJuly 28, 2026