github.com/OpenListTeam/OpenList/v3 vulnerabilities (Go)

6 vulnerabilities.

• github.com/OpenListTeam/OpenList/v3 Go OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool CVE-2026-75602 Fix available 6.5 MediumSeptember 3, 2026
• github.com/OpenListTeam/OpenList/v3 Go OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API CVE-2026-69160 Fix available 6.5 MediumJuly 24, 2026
• github.com/OpenListTeam/OpenList/v3 Go OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search CVE-2026-102663 Fix available 4.3 MediumJuly 24, 2026
• github.com/OpenListTeam/OpenList/v3 Go OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal CVE-2026-73509 Fix available 7.6 HighJuly 24, 2026
• github.com/OpenListTeam/OpenList/v3 Go OpenList Insecure TLS Default Configuration CVE-2026-25060 Fix available 8.1 HighFebruary 2, 2026
• github.com/OpenListTeam/OpenList/v3 Go OpenList affected by Path Traversal in file copy and remove handlers CVE-2026-25059 Fix available 8.8 HighFebruary 2, 2026