Description
Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/Xhofe/alist | >= 2.0.10, < 2.1.1 | 2.1.1 | GHSA-jpj5-hg26-6jgc |