HIGH7.3Go
GHSA-c69x-5xmw-v44x· CVE-2024-24767, GO-2024-2614CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability
Modified: 9/10/2026
package
Go/github.com/IceWhaleTech/CasaOS-UserService
pkg:go/github.com/IceWhaleTech/CasaOS-UserService
MEDIUM6.2Go
GHSA-c967-2652-gfjm· CVE-2024-24766, GO-2024-2615CasaOS Username Enumeration
Modified: 9/10/2026
HIGH7.5Go
GHSA-h5gf-cmm8-cg7c· CVE-2024-24765, GO-2024-2616CasaOS-UserService allows unauthorized access to any file
Modified: 9/10/2026
MEDIUM6.2Go
GHSA-hcw2-2r9c-gc6p· CVE-2024-28232, GO-2024-2668CasaOS Username Enumeration - Bypass of CVE-2024-24766
Modified: 2/4/2026
—Go
GO-2024-2614· CVE-2024-24767, GHSA-c69x-5xmw-v44xPassword brute force attack in github.com/IceWhaleTech/CasaOS-UserService
Modified: 5/20/2024
—Go
GO-2024-2615· CVE-2024-24766, GHSA-c967-2652-gfjmUsername enumeration in github.com/IceWhaleTech/CasaOS-UserService
Modified: 5/20/2024
—Go
GO-2024-2616· CVE-2024-24765, GHSA-h5gf-cmm8-cg7cPath traversal and user privilege escalation in github.com/IceWhaleTech/CasaOS-UserService
Modified: 5/20/2024
—Go
GO-2024-2668· CVE-2024-28232, GHSA-hcw2-2r9c-gc6pLogin username enumeration in github.com/IceWhaleTech/CasaOS-UserService
Modified: 5/20/2024