Skip to content
OpenAdvisories

Package · Go

github.com/syncthing/syncthing

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.6
    CVE-2022-46165

    Cross-site Scripting (XSS) in Web GUI in syncthing

    Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync malicious files which contain arbitrary HTML and JavaScript in the name. If the owner of another device loo…

    syncthing syncthing github.com/syncthing/syncthing syncthing Debian Ubuntu Go
  • High 7.5
    CVE-2021-21404

    Crash due to malformed relay protocol message

    Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server `strelaysrv` can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the sa…

    syncthing syncthing syncthing syncthing Debian Ubuntu Alpine Go
  • High 7.5
    CVE-2017-1000420

    Syncthing vulnerable to symlink traversal and arbitrary file overwrite

    Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite

    github.com/syncthing/syncthing syncthing Debian Go