CVE-2026-53553: Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

July 7, 2026

Click here to jump to the Simplified Chinese version (点击跳转到简体中文版本)

References

github.com/advisories/GHSA-4g5x-hcwm-82jw
github.com/zhenorzz/goploy/security/advisories/GHSA-4g5x-hcwm-82jw
nvd.nist.gov/vuln/detail/CVE-2026-53553

Code Behaviors & Features

Detect and mitigate CVE-2026-53553 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →