NULL Pointer Dereference Affecting github.com/olivetin/olivetin/service/internal/api package, versions <3000.11.1
Threat Intelligence
Exploit Maturity
Snyk has a proof-of-concept or detailed explanation of how to exploit this vulnerability.
Proof of Concept
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-GOLANG-GITHUBCOMOLIVETINOLIVETINSERVICEINTERNALAPI-15440718
- published9 Mar 2026
- disclosed5 Mar 2026
- creditmaru1009
Introduced: 5 Mar 2026
CVE NOT AVAILABLE CWE-476 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade github.com/OliveTin/OliveTin/service/internal/api to version 3000.11.1 or higher.
Overview
Affected versions of this package are vulnerable to NULL Pointer Dereference via the KillAction and RestartAction API handlers when a log entry is created with a nil binding through StartActionByGet using an invalid action ID. An attacker can cause repeated server-side panics and disrupt service availability by sending crafted API requests without authentication.