Vulnerability GO-2026-6576
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
6 hours ago
October 01, 2026 at 08:23 PM UTC
Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope in github.com/cloudreve/Cloudreve
>=0.0.0
>=0.0.0
Summary
Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope in github.com/cloudreve/Cloudreve
Details
Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope in github.com/cloudreve/Cloudreve
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
6 hours ago
Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses in github.com/cloudreve/Cloudreve
>=0.0.0 GO-2026-6572
>=0.0.0 GO-2026-6572
Unknown
6 hours ago
Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses in github.com/cloudreve/Cloudreve
>=0.0.0 GO-2026-6572
>=0.0.0 GO-2026-6572
Unknown
6 hours ago
Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses in github.com/cloudreve/Cloudreve
<4.0.0-20260715072853-1c5cad6dec7e GO-2026-6572
<4.0.0-20260715072853-1c5cad6dec7e GO-2026-6572
Unknown
6 hours ago
Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service in github.com/cloudreve/Cloudreve
v3.0.0-20250225100611-da4e44b77af4 GO-2026-6578
v3.0.0-20250225100611-da4e44b77af4 GO-2026-6578
Unknown
6 hours ago
Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service in github.com/cloudreve/Cloudreve
v3.0.0-20250225100611-da4e44b77af4 GO-2026-6578
v3.0.0-20250225100611-da4e44b77af4 GO-2026-6578
Impacted packages
Timeline
Published
6 hours ago
October 01, 2026 at 08:23 PM UTC
Last Modified
6 hours ago
October 01, 2026 at 08:45 PM UTC