Skip to content
OpenAdvisories

Package · Go

github.com/mickael-kerjean/filestash

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.1
    CVE-2026-50891

    Filestash allows attackers to escalate privileges via sending a crafted request

    Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request.

    github.com/mickael-kerjean/filestash Go
  • Medium 5.9
    CVE-2024-41256

    Filestash skips TLS certificate verification process when sending out email verification codes

    Default configurations in the ShareProofVerifier function of filestash v0.4 causes the application to skip the TLS certificate verification process when sending out email verification codes, possibly allowing attackers to access sensitive data via a man-in-th…

    github.com/mickael-kerjean/filestash Go
  • High 7.5
    CVE-2024-41255

    Filestash configured to skip TLS certificate verification when using the FTPS protocol

    filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go.

    github.com/mickael-kerjean/filestash Go