github.com/daptin/daptin
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware | github.com/daptin/daptin | Go | High | No fix reported | |
| Daptin: SQL injection via unvalidated goqu.L() calls in aggregate API | github.com/daptin/daptin | Go | High | Fix reported | |
| Daptin fuzzy search injects unvalidated column name into raw SQL | github.com/daptin/daptin | Go | High | Fix reported | |
| Daptin has Unauthenticated Path Traversal and Zip Slip | github.com/daptin/daptin | Go | Critical | Fix reported | |
| Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change | github.com/daptin/daptin | Go | Medium | Fix reported |