Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/OpenListTeam/OpenList/v4

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/OpenListTeam/OpenList/v4 in go

Moderate
23 days ago

OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API GSA_kwCzR0hTQS04NmN4LXd3ZjQtcGhxNM4ABfta

go github.com/OpenListTeam/OpenList/v4
Moderate
23 days ago

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search GSA_kwCzR0hTQS1wNnBoLTNqeDItMzMzN84ABftZ

go github.com/OpenListTeam/OpenList/v4
High
23 days ago

OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal GSA_kwCzR0hTQS05NWN2LXI4eDQtdmg3Nc4ABftY

go github.com/OpenListTeam/OpenList/v4
High
7 months ago

OpenList has Insecure TLS Default Configuration GSA_kwCzR0hTQS13ZjkzLTNnaGgtaDM4Oc4ABRzq

go github.com/OpenListTeam/OpenList/v4
High
7 months ago

OpenList vulnerable to Path Traversal in file copy and remove handlers GSA_kwCzR0hTQS1xbWoyLThyMjQteHhjcc4ABRzo

go github.com/OpenListTeam/OpenList/v4
Potential
Moderate
about 1 year ago

OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer GSA_kwCzR0hTQS0yaHczLWg4cXgtaHFxcM4ABJPB

npm @openlist-frontend/openlist-frontend

Filter by Severity

Moderate 3 High 3