github.com/shellhub-io/shellhub vulnerabilities (Go)

4 vulnerabilities.

• github.com/shellhub-io/shellhub Go ShellHub: Cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check CVE-2026-44426 Fix available 6.5 MediumMay 7, 2026
• github.com/shellhub-io/shellhub Go ShellHub: Crash-DoS via field injection in filter and sort-by parameters CVE-2026-44425 Fix available 5.4 MediumMay 6, 2026
• github.com/shellhub-io/shellhub Go ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data CVE-2026-44423 Fix available 6.5 MediumMay 6, 2026
• github.com/shellhub-io/shellhub Go ShellHub: Cross-tenant IDOR in `GET /api/devices/:uid` discloses device data of any namespace CVE-2026-44424 Fix available 6.5 MediumMay 6, 2026