Skip to content
OpenAdvisories

Package · Go

github.com/forceu/gokapi

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-28683

    Gokapi: Stored XSS in SVG Hotlinks

    Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, if a malicious authenticated user uploads SVG and creates a hotlink for it, they can achieve stored XSS. This issue has been patched in versi…

    Forceu Gokapi github.com/forceu/gokapi Go