Skip to content
OpenAdvisories

Product · Woahai321

ListSync

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-3958

    Woahai321 ListSync JSON api_server.py requests.post server-side request forgery

    A vulnerability has been found in Woahai321 ListSync up to 0.6.6. This issue affects the function requests.post of the file list-sync-main/api_server.py of the component JSON Handler. The manipulation leads to server-side request forgery. The attack is possib…

    Woahai321 ListSync