VulnSea

alist-org has 2 CVEs on record. The median CVSS is 8.9 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
8.9
Publish → KEV
—
Last 90 days
0 prev 0

Weakness classes

Products

  • github.com/alist-org/alist/v3 2
Follow alist-org:RSS feedSave a search →Embed badge ↗
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

alist-org vulnerabilities

CVEs affecting alist-org, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-25161High· 8.8
8mo ago

Alist vulnerable to Path Traversal in multiple file operation handlers

Alist vulnerable to Path Traversal in multiple file operation handlers

▾ Twilightalist-org · github.com/alist-org/alist/v3EPSS 0.81%via GHSA
CVE-2026-25160Critical· 9.1
8mo ago

Alist has Insecure TLS Config

Alist has Insecure TLS Config

▾ Midnightalist-org · github.com/alist-org/alist/v3EPSS 0.25%via GHSA
alist-org vulnerabilities (CVEs) · VulnSea