Vulnerability GO-2026-5640
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 months ago
June 25, 2026 at 10:34 PM UTC
Daptin: SQL injection via unvalidated goqu.L() calls in aggregate API in github.com/daptin/daptin
v0.1.0 - v0.11.3
v0.1.0 - v0.11.3
Summary
Daptin: SQL injection via unvalidated goqu.L() calls in aggregate API in github.com/daptin/daptin
Details
Daptin: SQL injection via unvalidated goqu.L() calls in aggregate API in github.com/daptin/daptin
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
1 day ago
Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware
v0.1.0 - v0.12.15 GHSA-rhj7-vh3v-mcq6
v0.1.0 - v0.12.15 GHSA-rhj7-vh3v-mcq6
Unknown
4 months ago
Daptin fuzzy search injects unvalidated column name into raw SQL in github.com/daptin/daptin
v0.1.0 - v0.11.4 GO-2026-5555
v0.1.0 - v0.11.4 GO-2026-5555
Unknown
4 months ago
Daptin has Unauthenticated Path Traversal and Zip Slip in github.com/daptin/daptin
v0.1.0 - v0.11.8 GO-2026-5285
v0.1.0 - v0.11.8 GO-2026-5285
Unknown
5 months ago
Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change in github.com/daptin/daptin
v0.1.0 - v0.11.7 GO-2026-4991
v0.1.0 - v0.11.7 GO-2026-4991
Medium Risk
5 months ago
Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change
v0.1.0 - v0.11.7 GHSA-258c-965c-p3hc
v0.1.0 - v0.11.7 GHSA-258c-965c-p3hc
Impacted packages
Timeline
Published
4 months ago
June 25, 2026 at 10:34 PM UTC
Fixed (v0.11.4)
6 months ago
April 16, 2026 at 06:21 AM UTC
Last Modified
4 months ago
June 25, 2026 at 11:01 PM UTC