github.com/alist-org/alist

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2026-25160

Alist has Insecure TLS Config

Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables TLS certificate verification by default for all outgoing storage driver communications, making the system vulnerable to…

AlistGo alist github.com/alist-org/alist/v3 github.com/alist-org/alist Go

Feb 4, 2026
Critical 9.8

CVE-2022-45969

Alist vulnerable to Path Traversal

Alist v3.4.0 is vulnerable to Directory Traversal,

github.com/alist-org/alist/v3 github.com/alist-org/alist Go

Dec 15, 2022