Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
github.com/forceu/gokapi
Go
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload
CVE-2026-30961 · GHSA-45VH-RPC8-HXPP
Version ranges need review.
github.com/forceu/gokapi
Go
Medium
Fix reported
2026-03-25
Gokapi vulnerable to DoS in E2E Metadata Parser
CVE-2026-30955 · GHSA-QWC6-VC2V-2GGJ
Version ranges need review.
github.com/forceu/gokapi
Go
Medium
Fix reported
2026-03-25
Gokapi vulnerable to Privilege Escalation in File Replace
CVE-2026-30943 · GHSA-J6JP-78W8-34X6
Version ranges need review.
github.com/forceu/gokapi
Go
Medium
Fix reported
2026-03-25
Gokapi has privilege escalation with auth token
CVE-2026-29060 · GHSA-M2HX-WJXC-9FP4
Version ranges need review.
github.com/forceu/gokapi
Go
Medium
Fix reported
2026-03-23
Gokapi has Data Leak in Upload Status Stream
CVE-2026-28682 · GHSA-C36C-7PC2-F2PH
Version ranges need review.
github.com/forceu/gokapi
Go
Medium
Fix reported
2026-03-23
Gokapi has CSRF in Login Endpoint
CVE-2026-29084 · GHSA-HCFF-QV74-7HR4
Version ranges need review.
github.com/forceu/gokapi
Go
Medium
Fix reported
2026-03-23
Gokapi has privilege escalation via incomplete API-key permission revocation on user rank demotion
CVE-2026-29061 · GHSA-Q658-HFPG-35QC
Version ranges need review.
github.com/forceu/gokapi
Go
Medium
Fix reported
2026-03-23
Gokapi has Stored XSS in SVG Hotlinks
CVE-2026-28683 · GHSA-3C22-5J5M-4JQ7
Version ranges need review.
github.com/forceu/gokapi
Go
High
Fix reported
2026-03-23
Gokapi has stored XSS vulnerability in friendly name for API keys
CVE-2025-48495 · GHSA-4XG4-54HM-9J77
Version ranges need review.
github.com/forceu/gokapi
Go
Medium
Fix reported
2025-08-26
Gokapi vulnerable to stored XSS via uploading file with malicious file name
CVE-2025-48494 · GHSA-95RC-WC32-GM53
Version ranges need review.
github.com/forceu/gokapi
Go
Medium
Fix reported
2025-08-26