Skip to content
OpenAdvisories

Package · Go

github.com/daptin/daptin

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    GHSA-9cp7-j3f8-p5jx

    Daptin has Unauthenticated Path Traversal and Zip Slip

    ### Impact The `cloudstore.file.upload` action in `server/actions/action_cloudstore_file_upload.go` writes user-supplied filenames directly to disk without proper validation. This allows unauthenticated attackers to perform path traversal and zip slip attacks…

    github.com/daptin/daptin Go