github.com/umputun/remark42 vulnerabilities (Go)

2 vulnerabilities.

• github.com/umputun/remark42 Go Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment CVE-2026-77463 Fix available 6.5 MediumNovember 5, 2026
• github.com/umputun/remark42 Go Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing CVE-2026-48788 Fix available 8.2 HighJune 16, 2026