github.com/umputun/remark42
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment | github.com/umputun/remark42/backendgithub.com/umputun/remark42 | Go | Medium | Fix reported | |
| Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing | github.com/umputun/remark42 | Go | High | Fix reported |