All products

github.com/gophish/gophish

Go · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Gophish contains a denial of service vulnerabilityCVE-2026-39904 · GHSA-42JC-V69J-G38FVersion ranges need review. github.com/gophish/gophish Go High No fix reported
GoPhish sends cleartext passwordsCVE-2024-55196 · GHSA-RV83-H68Q-C4WQVersion ranges need review. github.com/gophish/gophish Go High No fix reported
Gophish vulnerable to Server-Side Request ForgeryCVE-2020-24710 · GHSA-9C9W-9PQ7-F35HVersion ranges need review. github.com/gophish/gophish Go Medium Fix reported
Gophish XSS VulnerabilityCVE-2019-16146 · GHSA-9H9F-9Q8G-6764Version ranges need review. github.com/gophish/gophish Go Medium Fix reported
Gophish before 0.12.0 vulnerable to Open RedirectCVE-2022-25295 · GHSA-HVW3-P9PX-GPC9Version ranges need review. github.com/gophish/gophish Go Medium Fix reported
Gophish is vulnerable to Incorrect Access ControlCVE-2025-70963 · GHSA-9F8M-9547-2GQMVersion ranges need review. github.com/gophish/gophish Go Medium No fix reported
Gophish vulnerable to Denial of Service via crafted payload involving autofocusCVE-2022-45003 · GHSA-8GG8-WR4J-V2WR github.com/gophish/gophish Go High No fix reported
Gophish vulnerable to Cross-site Scripting via crafted landing pageCVE-2022-45004 · GHSA-55M9-HM92-XM8J github.com/gophish/gophish Go Medium No fix reported