github.com/go-acme/lego/v3 vulnerabilities (Go)

2 vulnerabilities.

• github.com/go-acme/lego/v3 Go Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider CVE-2026-40611 Fix available 8.8 HighApril 16, 2026
• github.com/go-acme/lego/v3 Go Lego does not enforce HTTPS CVE-2025-54799 Fix available 2.3 LowAugust 6, 2025