Skip to content
OpenAdvisories

Package · Ubuntu

gopass

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-118756

    gopass before 1.17.0 Path Traversal via fs Storage Prune and IsDir

    gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to delete directories outside the password store via ../ entry names in Prune and IsDir. Collaborators with write access to a shared git-synce…

    gopasspw gopass golang-github-gopasspw-gopass gopass Debian Ubuntu