Vulnerabilities

TI-2026-71250 CVE-2026-102663

Path prefix check flaw in OpenList search leaks file metadata

MEDIUM 53

OpenList is a file list program that supports multiple storage backends.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0026 Published 2026-10-12 Fixed in 4.2.4 CWE-200

TI-2026-52909 CVE-2026-75602 · GHSA-h6cj-26g5-67fv

MEDIUM 62

OpenList a file list program that supports multiple storage.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00694 Published 2026-09-03 Fixed in 4.2.3 CWE-22

TI-2026-48534 CVE-2026-69160 · GHSA-86cx-wwf4-phq4

MEDIUM 62

OpenList a file list program that supports multiple storage.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00402 Published 2026-08-18 Fixed in 4.2.4 CWE-639

TI-2026-51619 CVE-2026-73509 · GHSA-95cv-r8x4-vh75

HIGH 66

OpenList a file list program that supports multiple storage.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00522 Published 2026-08-13 Fixed in 4.2.4 CWE-22

TI-2025-32066 CVE-2025-50183 · GHSA-2hw3-h8qx-hqqp

MEDIUM 62

OpenList Frontend is a UI component for OpenList.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00316 Published 2025-06-19 Fixed in 4.0.0-rc.4 CWE-79