leomoon-studios has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 5.3 (medium). The most common weakness class is CWE-22 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-114376Medium· 6.3leomoon-studios wiki-go API editor.go SourceHandler path traversal35CVE-2026-114375Medium· 6.3leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal35CVE-2026-114374Medium· 4.3leomoon-studios wiki-go fetch-metadata Endpoint metadata_api.go server-side request forgery24CVE-2026-114377Low· 3.8leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversal21
leomoon-studios vulnerabilities
CVEs affecting leomoon-studios, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-114377Low· 3.8leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversal
A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go of the component Comment Deletion Handler. The manipulation…
CVE-2026-114374Medium· 4.3leomoon-studios wiki-go fetch-metadata Endpoint metadata_api.go server-side request forgery
A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadata_api.go of the component fetch-metadata Endpoint. Such manipulation leads to server-side reques…
CVE-2026-114375Medium· 6.3leomoon-studios wiki-go Files Rename API files.go RenameFileHandler path traversal
A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the component Files Rename API. Performing a manipulation of the argument cu…
CVE-2026-114376Medium· 6.3leomoon-studios wiki-go API editor.go SourceHandler path traversal
A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function SaveHandler/SourceHandler of the file internal/handlers/editor.go of the component API. Executing a manipulation can le…