Forceu Gokapi vulnerabilities

• forceu gokapi Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload CVE-2026-30961 Fix available 4.3 MediumMarch 13, 2026
• forceu gokapi Gokapi vulnerable to DoS in E2E Metadata Parser CVE-2026-30955 Fix available 6.5 MediumMarch 13, 2026
• forceu gokapi Gokapi has Privilege Escalation in File Replace CVE-2026-30943 Fix available 4.1 MediumMarch 13, 2026
• forceu gokapi Gokapi: CSRF in Login Endpoint CVE-2026-29084 Fix available 4.6 MediumMarch 5, 2026
• forceu gokapi Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion CVE-2026-29061 Fix available 5.4 MediumMarch 5, 2026
• forceu gokapi Gokapi: Privilege escalation with auth token CVE-2026-29060 Fix available 5.0 MediumMarch 5, 2026
• forceu gokapi Gokapi: Stored XSS in SVG Hotlinks CVE-2026-28683 Fix available 8.7 HighMarch 5, 2026
• forceu gokapi Gokapi: Data Leak in Upload Status Stream CVE-2026-28682 Fix available 6.4 MediumMarch 5, 2026
• forceu gokapi Gokapi has stored XSS vulnerability in friendly name for API keys CVE-2025-48495 Fix available 4.8 MediumJune 2, 2025
• forceu gokapi Gokapi vulnerable to stored XSS via uploading file with malicious file name CVE-2025-48494 Fix available 4.8 MediumJune 2, 2025