go-acme

Products

ProductCVEsExploitedLatest
lego2–Apr 21, 2026

Exploited and recent CVEs

  • CVE-2026-40611 High 8.8 Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider 0.4%
  • CVE-2025-54799 Low 2.3 Lego does not enforce HTTPS 0.2%