{"id":"EUVD-2026-68726","revision":"15c370cc16054d99837c8eb40eaaa6ff","records":[{"revision":"15c370cc16054d99837c8eb40eaaa6ff","observedAt":"2026-10-28T07:17:51.873+00:00","statement":{"source":"euvd","id":"EUVD-2026-68726","aliases":["CVE-2026-53553","GHSA-4g5x-hcwm-82jw"],"title":"Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/fileDiff (File Compare), when handling file paths provided by th…","description":"Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/fileDiff (File Compare), when handling file paths provided by the client. This issue has been patched in version 1.18.0.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","score":7.7,"severity":null}],"references":["https://github.com/zhenorzz/goploy/security/advisories/GHSA-4g5x-hcwm-82jw","https://github.com/zhenorzz/goploy/commit/d51aa15ebc0a474d9d71d6c453a0fe798dd5e007","http://github.com/zhenorzz/goploy/releases/tag/v1.18.0"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-68726","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Aug 31, 2026, 6:46:52 PM","dateUpdated":"Aug 31, 2026, 7:35:12 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-68726","identifiers":["EUVD-2026-68726","CVE-2026-53553","GHSA-4g5x-hcwm-82jw"]},"retained":false,"historicalAffected":[]}],"coverage":[]}