Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: Forceu Clear all filters
TI-2026-23780 CVE-2026-30955 · GHSA-qwc6-vc2v-2ggj

Gokapi vulnerable to DoS in E2E Metadata Parser

Priority LOW 28

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00257 Published 2026-03-13 Fixed in 2.2.4 CWE-400
TI-2026-23768 CVE-2026-30943 · GHSA-j6jp-78w8-34x6

Gokapi has Privilege Escalation in File Replace

Priority LOW 18

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00186 Published 2026-03-13 Fixed in 2.2.4 CWE-863
TI-2026-23228 CVE-2026-29084 · GHSA-hcff-qv74-7hr4

Gokapi: CSRF in Login Endpoint

Priority LOW 20

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00085 Published 2026-03-06 Fixed in 2.2.3 CWE-352
TI-2026-23205 CVE-2026-29060 · GHSA-m2hx-wjxc-9fp4

Gokapi: Privilege escalation with auth token

Priority LOW 22

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00148 Published 2026-03-06 Fixed in 2.2.3 CWE-284
TI-2026-22898 CVE-2026-28683 · GHSA-3c22-5j5m-4jq7

Gokapi: Stored XSS in SVG Hotlinks

Priority LOW 39

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00205 Published 2026-03-06 Fixed in 2.2.3 CWE-79
TI-2026-22897 CVE-2026-28682 · GHSA-c36c-7pc2-f2ph

Gokapi: Data Leak in Upload Status Stream

Priority LOW 27

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00143 Published 2026-03-06 Fixed in 2.2.3 CWE-200
TI-2025-30774 CVE-2025-48495 · GHSA-4xg4-54hm-9j77

Gokapi has stored XSS vulnerability in friendly name for API keys

Priority LOW 21

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00142 Published 2025-06-02 Fixed in 2.0.0, 0.0.0-20250530185940-65ddbc68fbfd CWE-79