Vulnerability GO-2026-6802
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
SFTPGo source-side file-pattern filter bypass during copy operations in github.com/drakkan/sftpgo
v1.0.0 - v1.2.2
v1.0.0 - v1.2.2
Summary
SFTPGo source-side file-pattern filter bypass during copy operations in github.com/drakkan/sftpgo
Details
SFTPGo source-side file-pattern filter bypass during copy operations in github.com/drakkan/sftpgo
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 hours ago
SFTPGo: Denial of service via malformed SSH channel request in github.com/drakkan/sftpgo
v2.0.0 - v2.7.4 GO-2026-6792
v2.0.0 - v2.7.4 GO-2026-6792
Unknown
5 hours ago
SFTPGo: Denial of service via malformed SSH channel request in github.com/drakkan/sftpgo
v2.0.0 - v2.7.4 GO-2026-6792
v2.0.0 - v2.7.4 GO-2026-6792
Medium Risk
4 days ago
SFTPGo source-side file-pattern filter bypass during copy operations
v2.5.0 - v2.7.5 GHSA-wwv9-g5x4-966q
v2.5.0 - v2.7.5 GHSA-wwv9-g5x4-966q
Medium Risk
4 days ago
SFTPGo: Denial of service via malformed SSH channel request
v2.0.0 - v2.7.4 GHSA-q7pc-356p-hggc
v2.0.0 - v2.7.4 GHSA-q7pc-356p-hggc
Unknown
3 months ago
SFTPGo has stored XSS via inline parameter on public shares and user file download in github.com/drakkan/sftpgo
v1.0.0 - v1.2.2 GO-2026-5900
v1.0.0 - v1.2.2 GO-2026-5900
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Fixed (v2.7.6)
1 month ago
September 18, 2026 at 07:12 PM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC