All products

github.com/alist-org/alist

Go · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Alist has Insecure TLS ConfigCVE-2026-25160 · GHSA-8JMM-3XWX-W974Version ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go Critical Fix reported
Alist vulnerable to Path Traversal in multiple file operation handlersCVE-2026-25161 · GHSA-X4Q4-7PHH-42J9Version ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go High Fix reported
Alist reflected Cross-Site Scripting vulnerabilityCVE-2024-47067 · GHSA-8PPH-GFHP-W226Version ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go Medium Fix reported
AList vulnerable to Improper Preservation of PermissionsCVE-2022-45968 · GHSA-4GJR-VGFX-9QVWVersion ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go High Fix reported
Alist vulnerable to Path TraversalCVE-2022-45969 · GHSA-PMG2-RPH8-P8R6Version ranges need review. github.com/alist-org/alist/v3github.com/alist-org/alist Go Critical Fix reported