GO-2025-3505: Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet

  GO-2026-4557: Fleet has an SQL Injection vulnerability via backtick escape in ORDER BY parameter in github.com/fleetdm/fleet

  GO-2026-4560: Fleet: Sensitive Google Calendar credentials disclosed to low-privileged users in github.com/fleetdm/fleet

  GO-2026-4561: Fleet: Authorization Bypass in certificate template batch deletion for team administrators in github.com/fleetdm/fleet

  GO-2026-4563: Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint in github.com/fleetdm/fleet

  GO-2026-4564: Fleet: Device lock PIN can be predicted if lock time is known in github.com/fleetdm/fleet