Security
فارسی
All products

github.com/OpenListTeam/OpenList

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchCVE-2026-102663 · GHSA-P6PH-3JX2-3337Version ranges need review. github.com/OpenListTeam/OpenList/v3github.com/OpenListTeam/OpenList/v4 Go Medium Fix reported
OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download toolCVE-2026-75602 · GHSA-H6CJ-26G5-67FVVersion ranges need review. github.com/OpenListTeam/OpenList/v3github.com/OpenListTeam/OpenList/v4 Go Medium Fix reported
OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation APICVE-2026-69160 · GHSA-86CX-WWF4-PHQ4Version ranges need review. github.com/OpenListTeam/OpenList/v3github.com/OpenListTeam/OpenList/v4 Go Medium Fix reported
OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversalCVE-2026-73509 · GHSA-95CV-R8X4-VH75Version ranges need review. github.com/OpenListTeam/OpenList/v3github.com/OpenListTeam/OpenList/v4 Go High Fix reported
OpenList vulnerable to Path Traversal in file copy and remove handlersCVE-2026-25059 · GHSA-QMJ2-8R24-XXCQVersion ranges need review. github.com/OpenListTeam/OpenList/v3github.com/OpenListTeam/OpenList/v4 Go High Fix reported
OpenList has Insecure TLS Default ConfigurationCVE-2026-25060 · GHSA-WF93-3GHH-H389Version ranges need review. github.com/OpenListTeam/OpenList/v3github.com/OpenListTeam/OpenList/v4 Go High Fix reported