Skip to content
OpenAdvisories

Package · Go

github.com/shi-gg/linkdave

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical —
    GHSA-xv8g-fj9h-6gmv

    Linkdave Missing Authentication on REST and WebSocket endpoints

    The `linkdave` server does not enforce authentication on its REST and WebSocket routes in versions prior to `0.1.5`. ### Impact An attacker with network access to the server port can: - Connect to the WebSocket endpoint (`/ws`) and receive a valid `session_id…

    github.com/shi-gg/linkdave Go