github.com/fleetdm/fleet vulnerabilities (Go)

4 vulnerabilities.

• github.com/fleetdm/fleet Go Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database CVE-2026-54245 Fix available 7.6 HighAugust 20, 2026
• github.com/fleetdm/fleet Go Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment CVE-2026-23518 Fix available 9.3 CriticalJanuary 20, 2026
• github.com/fleetdm/fleet Go Fleet has an Access Control vulnerability in debug/pprof endpoints CVE-2026-23517 Fix available 6.3 MediumJanuary 20, 2026
• github.com/fleetdm/fleet Go Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability CVE-2026-22808 Fix available 5.5 MediumJanuary 20, 2026