Vulnerability GO-2026-6772
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
Gotify: Insufficiently Protected Password Change endpoint in github.com/gotify/server
v1.0.0 - v1.2.1
v1.0.0 - v1.2.1
Summary
Gotify: Insufficiently Protected Password Change endpoint in github.com/gotify/server
Details
Gotify: Insufficiently Protected Password Change endpoint in github.com/gotify/server
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
4 days ago
Gotify: Insufficiently Protected Password Change endpoint
<=2.9.1 GHSA-3hcj-9m7p-wwm9
<=2.9.1 GHSA-3hcj-9m7p-wwm9
Medium Risk
4 days ago
Gotify: Insufficiently Protected Password Change endpoint
<3.0.0 GHSA-3hcj-9m7p-wwm9
<3.0.0 GHSA-3hcj-9m7p-wwm9
Unknown
2 years ago
gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server
v2.0.0 - v2.2.1 GO-2022-1208
v2.0.0 - v2.2.1 GO-2022-1208
Unknown
2 years ago
gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server
v2.0.0 - v2.2.1 GO-2022-1208
v2.0.0 - v2.2.1 GO-2022-1208
Unknown
2 years ago
Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server
v1.0.0 - v1.2.1 GO-2023-1471
v1.0.0 - v1.2.1 GO-2023-1471
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC