Skip to content
OpenAdvisories

Vendor

sea-team

2 known vulnerabilities.

Products

GoFound 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-120444

    GoFound through 1.4.1 Path Traversal via database parameter in /api/db/drop

    GoFound through 1.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to delete arbitrary directories by supplying ../ sequences in the database parameter. Attackers can send GET requests to /api/db/create and /api/db/drop, direc…

    sea-team GoFound