github.com/enchant97/note-mark/backend Security Advisories - Go | Ecosyste.ms: Advisories

github.com/enchant97/note-mark/backend

View on github.com · View on proxy.golang.org

Security Advisories for github.com/enchant97/note-mark/backend in go

High

about 1 month ago

Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p) GSA_kwCzR0hTQS1ycXJoLTh3cHYteDdoaM4ABaax

go github.com/enchant97/note-mark/backend

Moderate

about 1 month ago

Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books GSA_kwCzR0hTQS01ODhmLWZ2Y3YteGh2Zs4ABaaw

go github.com/enchant97/note-mark/backend

Critical

3 months ago

Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token Forgery GSA_kwCzR0hTQS1xNm1oLXJxd2gtZzc4Ns4ABWZw

go github.com/enchant97/note-mark/backend

High

3 months ago

Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code Execution GSA_kwCzR0hTQS1nNDlwLTRxeGotODh2M84ABWZv

go github.com/enchant97/note-mark/backend

Moderate

4 months ago

Note Mark: Unauthenticated read of notes and assets in soft-deleted public books GSA_kwCzR0hTQS0zZ3I5LTQ4NWotdjR4Zs4ABVyB

go github.com/enchant97/note-mark/backend

Critical

4 months ago

Note Mark: OIDC-registered users authenticated by submitting password "null" GSA_kwCzR0hTQS1weGY4LTZ3cW0tcjZoaM4ABVyA

go github.com/enchant97/note-mark/backend

Moderate

4 months ago

Note Mark has Broken Access Control on Asset Download GSA_kwCzR0hTQS1wNXc2LTc1ZjktY2MycM4ABVLz

go github.com/enchant97/note-mark/backend

Low

4 months ago

Note Mark: Username Enumeration via Login Endpoint Timing Side-Channel GSA_kwCzR0hTQS13Nm05LTM5Y3YtMmZ3cM4ABVLy

go github.com/enchant97/note-mark/backend

High

4 months ago

Note Mark has Stored XSS via Unrestricted Asset Upload GSA_kwCzR0hTQS05cHI0LXJmOTctNzlxaM4ABVLx

go github.com/enchant97/note-mark/backend

Filter by Severity

Moderate 3 High 3 Critical 2 Low 1