Skip to content
OpenAdvisories

Package · Go

github.com/drakkan/sftpgo

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-24366

    Insufficient sanitization of user provided rsync command in SFTPGo

    SFTPGo is an open source, event-driven file transfer solution. SFTPGo supports execution of a defined set of commands via SSH. Besides a set of default commands some optional commands can be activated, one of them being `rsync`. It is disabled in the default …

    drakkan sftpgo github.com/drakkan/sftpgo github.com/drakkan/sftpgo/v2 Go
  • High 8.3
    CVE-2022-36071

    Recovery codes abuse in SFTPGo

    SFTPGo is configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. SFTPGo WebAdmin and WebClient support login using TOTP (Time-based One Time Passwords) as a secondary authentication factor. Because TOTPs are often configured on mobile device…

    drakkan sftpgo github.com/drakkan/sftpgo github.com/drakkan/sftpgo/v2 Go