Go-shiori Shiori vulnerabilities
- go-shiori shiorigo-shiori Server-Side Request Forgery via Unrestricted Bookmark URL Fetch8.5 High
- go-shiori shiorishiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or Demotion8.2 High
- go-shiori shioriShiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account8.7 High
- go-shiori shioriShiori is vulnerable to authentication bypass via a brute force attack6.5 Medium