HIGH8.7Go
GHSA-3c22-5j5m-4jq7· CVE-2026-28683, GO-2026-4612Gokapi has Stored XSS in SVG Hotlinks
Modified: 3/23/2026
package
Go/github.com/forceu/gokapi
pkg:go/github.com/forceu/gokapi
MEDIUM4.3Go
GHSA-45vh-rpc8-hxpp· CVE-2026-30961, GO-2026-4695Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload
Modified: 3/24/2026
MEDIUM5.4Go
GHSA-4xg4-54hm-9j77· CVE-2025-48495, GO-2025-3736Gokapi has stored XSS vulnerability in friendly name for API keys
Modified: 8/26/2025
MEDIUMGo
GHSA-95rc-wc32-gm53· CVE-2025-48494, GO-2025-3737Gokapi vulnerable to stored XSS via uploading file with malicious file name
Modified: 8/26/2025
MEDIUM6.4Go
GHSA-c36c-7pc2-f2ph· CVE-2026-28682, GO-2026-4613Gokapi has Data Leak in Upload Status Stream
Modified: 3/23/2026
MEDIUM4.6Go
GHSA-hcff-qv74-7hr4· CVE-2026-29084, GO-2026-4624Gokapi has CSRF in Login Endpoint
Modified: 3/23/2026
MEDIUM4.1Go
GHSA-j6jp-78w8-34x6· CVE-2026-30943, GO-2026-4696Gokapi vulnerable to Privilege Escalation in File Replace
Modified: 3/24/2026
MEDIUM5.0Go
GHSA-m2hx-wjxc-9fp4· CVE-2026-29060, GO-2026-4615Gokapi has privilege escalation with auth token
Modified: 3/23/2026
MEDIUM5.4Go
GHSA-q658-hfpg-35qc· CVE-2026-29061, GO-2026-4626Gokapi has privilege escalation via incomplete API-key permission revocation on user rank demotion
Modified: 3/23/2026
MEDIUM6.5Go
GHSA-qwc6-vc2v-2ggj· CVE-2026-30955, GO-2026-4698Gokapi vulnerable to DoS in E2E Metadata Parser
Modified: 3/24/2026
—Go
GO-2025-3736· CVE-2025-48495, GHSA-4xg4-54hm-9j77Gokapi has stored XSS vulnerability in friendly name for API keys in github.com/forceu/gokapi
Modified: 6/3/2025
—Go
GO-2025-3737· CVE-2025-48494, GHSA-95rc-wc32-gm53Gokapi vulnerable to stored XSS via uploading file with malicious file name in github.com/forceu/gokapi
Modified: 6/3/2025
—Go
GO-2026-4612· CVE-2026-28683, GHSA-3c22-5j5m-4jq7Gokapi has Stored XSS in SVG Hotlinks in github.com/forceu/gokapi
Modified: 3/23/2026
—Go
GO-2026-4613· CVE-2026-28682, GHSA-c36c-7pc2-f2phGokapi has Data Leak in Upload Status Stream in github.com/forceu/gokapi
Modified: 3/23/2026
—Go
GO-2026-4615· CVE-2026-29060, GHSA-m2hx-wjxc-9fp4Gokapi has privilege escalation with auth token in github.com/forceu/gokapi
Modified: 3/23/2026
—Go
GO-2026-4624· CVE-2026-29084, GHSA-hcff-qv74-7hr4Gokapi has CSRF in Login Endpoint in github.com/forceu/gokapi
Modified: 3/23/2026
—Go
GO-2026-4626· CVE-2026-29061, GHSA-q658-hfpg-35qcGokapi has privilege escalation via incomplete API-key permission revocation on user rank demotion in github.com/forceu/gokapi
Modified: 3/23/2026
—Go
GO-2026-4695· CVE-2026-30961, GHSA-45vh-rpc8-hxppGokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload in github.com/forceu/gokapi
Modified: 3/23/2026
—Go
GO-2026-4696· CVE-2026-30943, GHSA-j6jp-78w8-34x6Gokapi vulnerable to Privilege Escalation in File Replace in github.com/forceu/gokapi
Modified: 3/23/2026
—Go
GO-2026-4698· CVE-2026-30955, GHSA-qwc6-vc2v-2ggjGokapi vulnerable to DoS in E2E Metadata Parser in github.com/forceu/gokapi
Modified: 3/23/2026