Vulnerability GO-2026-4991
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 months ago
May 20, 2026 at 07:07 PM UTC
Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change in github.com/daptin/daptin
v0.1.0 - v0.11.7
v0.1.0 - v0.11.7
Summary
Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change in github.com/daptin/daptin
Details
Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change in github.com/daptin/daptin
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
1 day ago
Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware
v0.1.0 - v0.12.15 GHSA-rhj7-vh3v-mcq6
v0.1.0 - v0.12.15 GHSA-rhj7-vh3v-mcq6
Unknown
4 months ago
Daptin: SQL injection via unvalidated goqu.L() calls in aggregate API in github.com/daptin/daptin
v0.1.0 - v0.11.3 GO-2026-5640
v0.1.0 - v0.11.3 GO-2026-5640
Unknown
4 months ago
Daptin fuzzy search injects unvalidated column name into raw SQL in github.com/daptin/daptin
v0.1.0 - v0.11.4 GO-2026-5555
v0.1.0 - v0.11.4 GO-2026-5555
Unknown
4 months ago
Daptin has Unauthenticated Path Traversal and Zip Slip in github.com/daptin/daptin
v0.1.0 - v0.11.8 GO-2026-5285
v0.1.0 - v0.11.8 GO-2026-5285
Medium Risk
5 months ago
Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change
v0.1.0 - v0.11.7 GHSA-258c-965c-p3hc
v0.1.0 - v0.11.7 GHSA-258c-965c-p3hc
Impacted packages
Timeline
Published
5 months ago
May 20, 2026 at 07:07 PM UTC
Fixed (v0.11.8)
6 months ago
May 01, 2026 at 10:32 AM UTC
Last Modified
5 months ago
May 20, 2026 at 07:30 PM UTC