github.com/xyproto/algernon vulnerabilities (Go)
9 vulnerabilities.
-
github.com/xyproto/algernonGo Algernon: Server-side script source disclosure on Windows via NTFS filename 8.7 High -
github.com/xyproto/algernonGo Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir 8.2 High -
github.com/xyproto/algernonGo Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: * 4.3 Medium -
github.com/xyproto/algernonGo Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS 4.3 Medium -
github.com/xyproto/algernonGo Algernon: Auto-refresh SSE event server binds to all interfaces with Access-Control-Allow-Origin: * and no authentication 5.3 Medium -
github.com/xyproto/algernonGo Algernon: handler.lua discovery walks parent directories above the server root 9.0 Critical -
github.com/xyproto/algernonGo Algernon: Single-file mode unconditionally enables debug mode 7.5 High -
github.com/xyproto/algernonGo Algernon Cross-Site Scripting vulnerability 6.1 Medium -
github.com/xyproto/algernonGo Algernon engine and themes vulnerable to Cross-site Scripting 5.4 Medium