romeo vulnerabilities

2 known vulnerabilities in romeo from Ctfer-io. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  romeo: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-32805Mar 18, 2026Ctfer-io

  Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.2, the `sanitizeArchivePath` function in `webserver/api/v1/decoder.go`

• 10.0 Critical severity

  romeo: Improper Access Control

  CVE-2026-32737Mar 18, 2026Ctfer-io

  Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from