Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

We publish releases monthly.

Version	Supported
>= 1.4.4	✅
< 1.4.4	❌

Reporting a Vulnerability

https://github.com/zeromicro/go-zero/security/advisories

Accepted vulnerabilities are expected to be fixed within a month.

Authorization Bypass Through User-Controlled Key in go-zero
GHSA-fgxv-gw55-r5fq published Mar 2, 2024 by kevwan

Critical

Learn more about advisories related to zeromicro/go-zero in the GitHub Advisory Database