Skip to content
OpenAdvisories

Package · Go

github.com/gophish/gophish

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-39904

    Gophish 0.12.1 Denial of Service via Office Document Upload

    Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email template attachment. The ApplyTemplate() function in models/attach…

    gophish gophish github.com/gophish/gophish Go
  • Medium 6.1
    CVE-2022-45004 Public exploit

    Gophish vulnerable to Cross-site Scripting via crafted landing page

    Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.

    github.com/gophish/gophish Go
  • Medium 5.4
    CVE-2022-25295

    Open Redirect

    This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parse(r.FormValue("next")) to extract path and eventually redirect user to a relative URL, but if n…

    github.com/gophish/gophish Go
  • Medium 5.3
    CVE-2020-24710

    Gophish vulnerable to Server-Side Request Forgery

    Gophish before 0.11.0 allows SSRF attacks.

    github.com/gophish/gophish Go
  • Medium 4.8
    CVE-2019-16146

    Gophish XSS Vulnerability

    Gophish through 0.8.0 allows XSS via a username.

    github.com/gophish/gophish Go