bird-lg-go 存在安全漏洞，攻击者可使用 mtr 的 -F 参数读取（服务进程有权限访问的）任意文件
部署了 bird-lg-go 的建议更新一下
https://github.com/xddxdd/bird-lg-go/security/advisories/GHSA-3qm5-22pm-wqg9
部署了 bird-lg-go 的建议更新一下
https://github.com/xddxdd/bird-lg-go/security/advisories/GHSA-3qm5-22pm-wqg9
GitHub
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') and Exposure of Sensitive Information to an…
### Summary
CVE-2026-26514 described a Denial of Service (DoS) vulnerability in `bird-lgproxy`'s `/traceroute` endpoint caused by argument injection (CWE-88). Its associated fix, commit `618...
CVE-2026-26514 described a Denial of Service (DoS) vulnerability in `bird-lgproxy`'s `/traceroute` endpoint caused by argument injection (CWE-88). Its associated fix, commit `618...
