{"id":"GO-2026-6269","revision":"76fb97dd33874d7da844bd225d4be192","records":[{"revision":"76fb97dd33874d7da844bd225d4be192","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6269","aliases":["CVE-2026-101046","GHSA-rxhg-vcww-2mpw"],"title":"Fleet: ORDER BY column injection on activity list endpoints in github.com/fleetdm/fleet","description":"Fleet: ORDER BY column injection on activity list endpoints in github.com/fleetdm/fleet","state":0,"publishedAt":"2026-08-25T15:00:02+00:00","modifiedAt":"2026-09-28T03:55:39.1193891+00:00","affected":[{"ecosystem":"Go","name":"github.com/fleetdm/fleet/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"4.89.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/fleetdm/fleet/security/advisories/GHSA-rxhg-vcww-2mpw","https://github.com/fleetdm/fleet/releases/tag/fleet-v4.89.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6269","license":"OSV · upstream source license applies","key":"osv:GO-2026-6269","identifiers":["GO-2026-6269","CVE-2026-101046","GHSA-rxhg-vcww-2mpw"]},"retained":false,"historicalAffected":[]}],"coverage":[]}