Vulnerability GO-2026-6109
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 month ago
August 18, 2026 at 02:32 PM UTC
OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList
v0.1.0 - v1.0.6
v0.1.0 - v1.0.6
Summary
OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList
Details
OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
1 month ago
OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList
v4.0.0 - v4.2.2 GO-2026-6368
v4.0.0 - v4.2.2 GO-2026-6368
Unknown
1 month ago
OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList
v4.0.0 - v4.2.2 GO-2026-6368
v4.0.0 - v4.2.2 GO-2026-6368
Unknown
1 month ago
OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList
v4.0.0 - v4.2.2 GO-2026-6368
v4.0.0 - v4.2.2 GO-2026-6368
Medium Risk
1 month ago
OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool
v0.1.0 - v1.0.6 GHSA-h6cj-26g5-67fv
v0.1.0 - v1.0.6 GHSA-h6cj-26g5-67fv
Unknown
1 month ago
OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList
v0.1.0 - v1.0.6 GO-2026-6110
v0.1.0 - v1.0.6 GO-2026-6110
Impacted packages
Timeline
Published
1 month ago
August 18, 2026 at 02:32 PM UTC
Last Modified
1 month ago
August 18, 2026 at 06:49 PM UTC