go-shiori

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

go-shiori records in CISA KEV

No go-shiori vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Shiori · all components

TI-2025-37707 CVE-2025-60538 · GHSA-mw8h-g64c-rxv4

HIGH 68

A lack of rate limiting in the login page of shiori v1.7.4 and below allows attackers to bypass authentication via a brute force attack.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00407 Published 2026-01-09 No fix listed CWE-290