Skip to content
OpenAdvisories

Package · Go

github.com/autobrr/qui

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.0
    CVE-2026-30924

    qui CORS Misconfiguration: Arbitrary Origins Trusted

    qui is a web interface for managing qBittorrent instances. Versions 1.14.1 and below use a permissive CORS policy that reflects arbitrary origins while also returning Access-Control-Allow-Credentials: true, effectively allowing any external webpage to make au…

    autobrr qui qbittorrent github.com/autobrr/qui Ubuntu Go