All products

github.com/forceu/gokapi

Go · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk UploadCVE-2026-30961 · GHSA-45VH-RPC8-HXPPVersion ranges need review. github.com/forceu/gokapi Go Medium Fix reported
Gokapi vulnerable to DoS in E2E Metadata ParserCVE-2026-30955 · GHSA-QWC6-VC2V-2GGJVersion ranges need review. github.com/forceu/gokapi Go Medium Fix reported
Gokapi vulnerable to Privilege Escalation in File ReplaceCVE-2026-30943 · GHSA-J6JP-78W8-34X6Version ranges need review. github.com/forceu/gokapi Go Medium Fix reported
Gokapi has privilege escalation with auth tokenCVE-2026-29060 · GHSA-M2HX-WJXC-9FP4Version ranges need review. github.com/forceu/gokapi Go Medium Fix reported
Gokapi has Data Leak in Upload Status StreamCVE-2026-28682 · GHSA-C36C-7PC2-F2PHVersion ranges need review. github.com/forceu/gokapi Go Medium Fix reported
Gokapi has CSRF in Login EndpointCVE-2026-29084 · GHSA-HCFF-QV74-7HR4Version ranges need review. github.com/forceu/gokapi Go Medium Fix reported
Gokapi has privilege escalation via incomplete API-key permission revocation on user rank demotionCVE-2026-29061 · GHSA-Q658-HFPG-35QCVersion ranges need review. github.com/forceu/gokapi Go Medium Fix reported
Gokapi has Stored XSS in SVG HotlinksCVE-2026-28683 · GHSA-3C22-5J5M-4JQ7Version ranges need review. github.com/forceu/gokapi Go High Fix reported
Gokapi has stored XSS vulnerability in friendly name for API keysCVE-2025-48495 · GHSA-4XG4-54HM-9J77Version ranges need review. github.com/forceu/gokapi Go Medium Fix reported
Gokapi vulnerable to stored XSS via uploading file with malicious file nameCVE-2025-48494 · GHSA-95RC-WC32-GM53Version ranges need review. github.com/forceu/gokapi Go Medium Fix reported