All products

github.com/alist-org/alist/v3

Go · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Alist has Insecure TLS ConfigCVE-2026-25160 · GHSA-8JMM-3XWX-W974Version ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go Critical Fix reported
Alist vulnerable to Path Traversal in multiple file operation handlersCVE-2026-25161 · GHSA-X4Q4-7PHH-42J9Version ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go High Fix reported
Alist reflected Cross-Site Scripting vulnerabilityCVE-2024-47067 · GHSA-8PPH-GFHP-W226Version ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go Medium Fix reported
AList vulnerable to Improper Preservation of PermissionsCVE-2022-45968 · GHSA-4GJR-VGFX-9QVWVersion ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go High Fix reported
Alist vulnerable to Path TraversalCVE-2022-45969 · GHSA-PMG2-RPH8-P8R6Version ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go Critical Fix reported
alist Incorrect Access Control vulnerabilityCVE-2023-33498 · GHSA-HH54-53M7-7FFJ github.com/alist-org/alist/v3 Go High No fix reported
Alist Cross-site Scripting vulnerabilityCVE-2022-45970 · GHSA-957M-G6RF-4C2M github.com/alist-org/alist/v3 Go Medium No fix reported