—Go
GO-2026-5640· CVE-2026-41422, GHSA-rw2c-8rfq-gwfvDaptin: SQL injection via unvalidated goqu.L() calls in aggregate API in github.com/daptin/daptin
Modified: 6/25/2026
package
Go/github.com/daptin/daptin
pkg:go/github.com/daptin/daptin
MEDIUM6.5Go
GHSA-258c-965c-p3hc· GO-2026-4991Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change
Modified: 5/20/2026
CRITICAL10.0Go
GHSA-9cp7-j3f8-p5jx· GO-2026-5285Daptin has Unauthenticated Path Traversal and Zip Slip
Modified: 6/25/2026
HIGHGo
GHSA-pwqg-q8pg-pp6r· CVE-2026-44349, GO-2026-5555Daptin fuzzy search injects unvalidated column name into raw SQL
Modified: 6/25/2026
HIGH8.3Go
GHSA-rw2c-8rfq-gwfv· CVE-2026-41422, GO-2026-5640Daptin: SQL injection via unvalidated goqu.L() calls in aggregate API
Modified: 6/25/2026
—Go
GO-2026-4991· GHSA-258c-965c-p3hcDaptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change in github.com/daptin/daptin
Modified: 5/20/2026
—Go
GO-2026-5285· GHSA-9cp7-j3f8-p5jxDaptin has Unauthenticated Path Traversal and Zip Slip in github.com/daptin/daptin
Modified: 6/25/2026
—Go
GO-2026-5555· CVE-2026-44349, GHSA-pwqg-q8pg-pp6rDaptin fuzzy search injects unvalidated column name into raw SQL in github.com/daptin/daptin
Modified: 6/25/2026