{"id":"GO-2026-5317","revision":"117b9d14935f4ebcb83b9045a177b639","records":[{"revision":"117b9d14935f4ebcb83b9045a177b639","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5317","aliases":["CVE-2026-55884","GHSA-c73q-8xxr-rgqm"],"title":"Tilt: Missing authentication on the network-exposed Tilt HUD server in github.com/tilt-dev/tilt","description":"Tilt: Missing authentication on the network-exposed Tilt HUD server in github.com/tilt-dev/tilt","state":0,"publishedAt":"2026-06-25T18:43:19+00:00","modifiedAt":"2026-06-25T19:45:28.8768928+00:00","affected":[{"ecosystem":"Go","name":"github.com/tilt-dev/tilt","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.20.8"},{"kind":"fixed","version":"0.37.4"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/tilt-dev/tilt/security/advisories/GHSA-c73q-8xxr-rgqm","https://github.com/tilt-dev/tilt/pull/6776","https://github.com/tilt-dev/tilt/releases/tag/v0.37.4"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5317","license":"OSV · upstream source license applies","key":"osv:GO-2026-5317","identifiers":["GO-2026-5317","CVE-2026-55884","GHSA-c73q-8xxr-rgqm"]},"retained":false,"historicalAffected":[]}],"coverage":[]}