Junglewise Threat Intelligence

CVE-2025-54799: GO-2025-3847 - Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego

CVE-2025-54799 · Severity: medium · CVSS 4 · Published 2025-08-11

Vendors: Go.

Executive brief

Github.com/go-acme/lego/v4/acme/api does not enforce HTTPS in github.com/go-acme/lego

Affected products

  • Go github.com/go-acme/lego/v3
  • Go github.com/go-acme/lego/v4
  • Go github.com/go-acme/lego

Related threats