{"id":"GO-2026-4967","revision":"1a11e9047c3f486d8e477dfe0c65c477","records":[{"revision":"1a11e9047c3f486d8e477dfe0c65c477","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-4967","aliases":["CVE-2026-42072","GHSA-2hp7-65r3-wv54"],"title":"NornicDB has Improper Network Binding in its Bolt Server, allowing unauthorized remote access in github.com/orneryd/nornicdb","description":"NornicDB has Improper Network Binding in its Bolt Server, allowing unauthorized remote access in github.com/orneryd/nornicdb","state":0,"publishedAt":"2026-05-20T19:07:16+00:00","modifiedAt":"2026-05-20T19:30:12.9611177+00:00","affected":[{"ecosystem":"Go","name":"github.com/orneryd/nornicdb","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.0.42-hotfix"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/orneryd/NornicDB/security/advisories/GHSA-2hp7-65r3-wv54","https://nvd.nist.gov/vuln/detail/CVE-2026-42072","https://github.com/orneryd/NornicDB/commit/adce4f9a9fc7b6aada07c0bfa2d737cd7a6efaca","https://github.com/orneryd/NornicDB/releases/tag/v1.0.42","https://github.com/orneryd/NornicDB/releases/tag/v1.0.42-hotfix"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-4967","license":"OSV · upstream source license applies","key":"osv:GO-2026-4967","identifiers":["GO-2026-4967","CVE-2026-42072","GHSA-2hp7-65r3-wv54"]},"retained":false,"historicalAffected":[]}],"coverage":[]}