neko vulnerabilities

CVEs whose affected-version data names the neko package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116679Medium· 5.4

yesterday

Neko: Authorization bypass in legacy WebRTC input handling

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input be…

▾ Sunlitm1k1o · nekoEPSS 0.31%via CVEORG