github.com/cloudreve/Cloudreve vulnerabilities
CVEs whose affected-version data names the github.com/cloudreve/Cloudreve package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
GO-2026-6289NoneCloudreve's remote download file paths can escape the selected destination directory in github.com/cloudreve/Cloudreve
Cloudreve's remote download file paths can escape the selected destination directory in github.com/cloudreve/Cloudreve
▾ Sunlitcloudreve · github.com/cloudreve/Cloudrevevia OSV
GO-2026-6287NoneCloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/…
Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint in github.com/cloudreve/Cloudreve
▾ Sunlitcloudreve · github.com/cloudreve/Cloudrevevia OSV
GO-2026-6106NoneCloudreve Admin.Read OAuth tokens can trigger server-side node test requests in github.com/cloudreve/Cloudreve
Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests in github.com/cloudreve/Cloudreve
▾ Sunlitcloudreve · github.com/cloudreve/Cloudrevevia OSV