cloudreve vulnerabilities

CVEs whose affected-version data names the cloudreve package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-25726High· 8.1

5mo ago

Cloudreve is a self-hosted file management and sharing system

Cloudreve is a self-hosted file management and sharing system. Prior to version 4.13.0, the application uses the weak pseudo-random number generator math/rand seeded with time.Now().UnixNano() to generate critical security secrets, inclu…

▾ Twilightcloudreve · cloudreveEPSS 0.38%via NVD