{"id":"GO-2026-6639","revision":"5b57929b8a434441bb87869cba2d6788","records":[{"revision":"5b57929b8a434441bb87869cba2d6788","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6639","aliases":["CVE-2026-62314","GHSA-6wcg-mqvh-fcvg"],"title":"Anubis: Policy bypass via client controlled X-Original-URI header in github.com/TecharoHQ/anubis","description":"Anubis: Policy bypass via client controlled X-Original-URI header in github.com/TecharoHQ/anubis","state":0,"publishedAt":"2026-10-07T14:10:14+00:00","modifiedAt":"2026-10-07T17:45:12.4744737+00:00","affected":[{"ecosystem":"Go","name":"github.com/TecharoHQ/anubis","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.22.0"},{"kind":"fixed","version":"1.26.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg","https://nvd.nist.gov/vuln/detail/CVE-2026-62314","https://github.com/TecharoHQ/anubis/commit/276b537776b281b1c4e01421435bc03ade3d8fc4","https://github.com/TecharoHQ/anubis/pull/1630","https://github.com/TecharoHQ/anubis/releases/tag/v1.26.0-pre1"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6639","license":"OSV · upstream source license applies","key":"osv:GO-2026-6639","identifiers":["GO-2026-6639","CVE-2026-62314","GHSA-6wcg-mqvh-fcvg"]},"retained":false,"historicalAffected":[]}],"coverage":[]}