Skip to content

Go-acme Lego vulnerabilities

go-acme lego, red hat openshift dev spaces 3.28 +1 moreLego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 ProviderCVE-2026-40611Fix available8.8 HighApril 16, 2026
go-acme legoLego does not enforce HTTPSCVE-2025-54799Fix available2.3 LowAugust 6, 2025