CVE-2026-1237

Description

Juju has broken CMR authorization in github.com/juju/juju

Affected packages (2)

• Go/github.com/juju/jujufrom 0, <= 0.0.0-20260127110037-9b1a0e53a4a4
• Go/github.com/juju/jujufrom 0

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-1237
• PATCHhttps://github.com/juju/juju
• WEBhttps://github.com/juju/juju/pull/21062
• WEBhttps://github.com/juju/juju/security/advisories/GHSA-j477-6vpg-6c8x