VDB
KO

GO-2026-6287

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve

Details

Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/cloudreve/Cloudreve
Introduced in: 0

No fixed version published yet for github.com/cloudreve/Cloudreve (go modules). Pin to a known-safe version or switch to an alternative.

Go / github.com/cloudreve/Cloudreve/v3
Introduced in: 0

No fixed version published yet for github.com/cloudreve/Cloudreve/v3 (go modules). Pin to a known-safe version or switch to an alternative.

Go / github.com/cloudreve/Cloudreve/v4
Introduced in: 0

No fixed version published yet for github.com/cloudreve/Cloudreve/v4 (go modules). Pin to a known-safe version or switch to an alternative.

References