github.com/casdoor/casdoor vulnerabilities
CVEs whose affected-version data names the github.com/casdoor/casdoor package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-9094Critical· 9.8Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check
Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check
▾ Midnightcasdoor · github.com/casdoor/casdoorEPSS 0.42%via OSV
CVE-2026-6815Medium· 5.9PoCCasdoor: Arbitrary file write possible through Local File System storage provider
Casdoor: Arbitrary file write possible through Local File System storage provider
▾ Twilightcasdoor · github.com/casdoor/casdoorEPSS 0.51%via OSV