Skip to content
OpenAdvisories

Package · Go

github.com/mickael-kerjean/filestash

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-50891

    Filestash allows attackers to escalate privileges via sending a crafted request

    Incorrect access control in the /admin/api/config component of Filestash v0.4.0 allows attackers to escalate privileges via sending a crafted request.

    github.com/mickael-kerjean/filestash Go
  • High 7.5
    CVE-2024-41255

    Filestash configured to skip TLS certificate verification when using the FTPS protocol

    filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go.

    github.com/mickael-kerjean/filestash Go