Skip to content
OpenAdvisories

Package · Go

github.com/gotify/server/v3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-102603

    Gotify: Insufficiently Protected Password Change endpoint

    Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint (POST /current/user/password) accepts a valid client token without requiring the account's current password or another…

    gotify server github.com/gotify/server/v2 github.com/gotify/server Go