Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/seaweedfs/seaweedfs
Go
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control
CVE-2026-72920 · GHSA-2V6V-25FM-P4FG
Version ranges need review.
github.com/seaweedfs/seaweedfs
Go
Critical
Fix reported
2026-09-10
SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths
CVE-2026-72921 · GHSA-GV5W-HFX8-8CWQ
Version ranges need review.
github.com/seaweedfs/seaweedfs
Go
High
Fix reported
2026-09-10
SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
CVE-2026-55874 · GHSA-56WQ-X3WV-3FF4
Version ranges need review.
github.com/seaweedfs/seaweedfs
Go
High
Fix reported
2026-09-02
SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets
CVE-2026-55873 · GHSA-HGPF-8634-G44C
Version ranges need review.
github.com/seaweedfs/seaweedfs
Go
Medium
Fix reported
2026-09-02
SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle
CVE-2026-73080 · GHSA-87FV-VQQR-M4JR
Version ranges need review.
github.com/seaweedfs/seaweedfs
Go
Critical
Fix reported
2026-08-18
SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access
CVE-2026-54917 · GHSA-W62W-66V9-VVGV
github.com/seaweedfs/seaweedfs
Go
High
Fix reported
2026-08-12
SeaweedFS Vulnerable to SQL Injection
CVE-2024-40120 · GHSA-Q97M-8853-PQ76
Version ranges need review.
github.com/seaweedfs/seaweedfs
Go
Medium
Fix reported
2026-02-04
