github.com/loft-sh/devspace vulnerabilities (Go)

2 vulnerabilities.

• github.com/loft-sh/devspace Go DevSpace UI Server WebSocket CheckOrigin does not validate source CVE-2026-42283 Fix available 7.7 HighMay 6, 2026
• github.com/loft-sh/devspace Go DevSpace vulnerable to remote code execution CVE-2020-15391 Fix available 9.8 CriticalJuly 23, 2020