Security
فارسی
All products

github.com/drakkan/sftpgo

Go · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SFTPGo source-side file-pattern filter bypass during copy operationsCVE-2026-103028 · GHSA-WWV9-G5X4-966QVersion ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Medium Fix reported
SFTPGo: Denial of service via malformed SSH channel requestCVE-2026-77375 · GHSA-Q7PC-356P-HGGCVersion ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Medium Fix reported
SFTPGo has insufficient access control for password resetCVE-2024-37897 · GHSA-HW5F-6WVV-XCRHVersion ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Medium Fix reported
SFTPGo has path confinement bypass in public browsable share partial ZIP downloadCVE-2026-49244 · GHSA-H64P-8H4R-6GFHVersion ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Medium Fix reported
SFTPGo has stored XSS via inline parameter on public shares and user file downloadCVE-2026-49245 · GHSA-3VCG-PV95-PQ54Version ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Low Fix reported
SFTPGo improperly sanitizes placeholders in group home directories/key prefixesCVE-2026-30915 · GHSA-M83Q-5WR4-4GFPVersion ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Medium Fix reported
SFTPGo Vulnerable to Path Traversal and Permission Bypass via Path Normalization DiscrepancyCVE-2026-30914 · GHSA-X8QH-7475-C5MPVersion ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Medium Fix reported
SFTPGo has insufficient sanitization of user provided rsync commandCVE-2025-24366 · GHSA-VJ7W-3M8C-6VPXVersion ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go High Fix reported
sftpgo vulnerable to brute force takeover of OpenID Connect session cookiesCVE-2024-52801 · GHSA-6943-QR24-82VXVersion ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Medium Fix reported
SFTPGo allows administrators to restrict command execution from the EventManagerCVE-2024-52309 · GHSA-49CC-XRJF-9QF7Version ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Medium Fix reported
SFTPGo WebClient vulnerable to Cross-site ScriptingCVE-2022-39220 · GHSA-CF7G-CM7Q-RQ7FVersion ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go Medium Fix reported
SFTPGo vulnerable to recovery codes abuseCVE-2022-36071 · GHSA-54QX-8P8W-XHG8Version ranges need review. github.com/drakkan/sftpgo/v2github.com/drakkan/sftpgo Go High Fix reported