HIGH8.8Go
GHSA-4gjr-vgfx-9qvw· CVE-2022-45968, GO-2022-1161AList vulnerable to Improper Preservation of Permissions
Modified: 8/21/2024
package
Go/github.com/alist-org/alist/v3
pkg:go/github.com/alist-org/alist/v3
CRITICAL9.1Go
GHSA-8jmm-3xwx-w974· CVE-2026-25160, GO-2026-4414Alist has Insecure TLS Config
Modified: 2/5/2026
MEDIUM6.1Go
GHSA-8pph-gfhp-w226· CVE-2024-47067, GO-2024-3190Alist reflected Cross-Site Scripting vulnerability
Modified: 10/11/2024
MEDIUM5.4Go
GHSA-957m-g6rf-4c2m· CVE-2022-45970Alist Cross-site Scripting vulnerability
Modified: 11/8/2023
HIGH8.8Go
GHSA-hh54-53m7-7ffj· CVE-2023-33498alist Incorrect Access Control vulnerability
Modified: 11/8/2023
CRITICAL9.8Go
GHSA-pmg2-rph8-p8r6· CVE-2022-45969, GO-2022-1171Alist vulnerable to Path Traversal
Modified: 4/23/2025
HIGH8.8Go
GHSA-x4q4-7phh-42j9· CVE-2026-25161, GO-2026-4415Alist vulnerable to Path Traversal in multiple file operation handlers
Modified: 2/5/2026
—Go
GO-2022-1161· CVE-2022-45968, GHSA-4gjr-vgfx-9qvwAList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
Modified: 3/3/2026
—Go
GO-2022-1171· CVE-2022-45969, GHSA-pmg2-rph8-p8r6Alist vulnerable to Path Traversal in github.com/alist-org/alist
Modified: 3/3/2026
—Go
GO-2024-3190· CVE-2024-47067, GHSA-8pph-gfhp-w226Alist reflected Cross-Site Scripting vulnerability in github.com/alist-org/alist
Modified: 3/3/2026
—Go
GO-2026-4414· CVE-2026-25160, GHSA-8jmm-3xwx-w974Alist has Insecure TLS Config in github.com/alist-org/alist
Modified: 2/5/2026
—Go
GO-2026-4415· CVE-2026-25161, GHSA-x4q4-7phh-42j9Alist vulnerable to Path Traversal in multiple file operation handlers in github.com/alist-org/alist
Modified: 2/5/2026