Go-acme Lego
2 CVEs affecting Go-acme Lego. Latest disclosed: 2026-04-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-40611 | High | 8.8 | 2026-04-21 | Let's Encrypt client and ACME library written in Go (Lego). Prior to 4.34.0, the webroot HTTP-01 challenge provider in lego is vulnerable to arbitrary file wri… |
CVE-2025-54799 | | 2025-08-07 | Let's Encrypt client and ACME library written in Go (Lego). In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package (thus the lego librar… |