Gokapi has Data Leak in Upload Status Stream

概要

参考情報

• Forceu/Gokapi security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-28682 · ADVISORY
• Forceu/Gokapi · PACKAGE
• Forceu/Gokapi release v2.2.3 · WEB

github.com/forceu/gokapi のその他の脆弱性

• CVE-2026-30961中 4.3Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, the chunked upload completion …
• CVE-2026-30955中 6.5Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unboun…
• CVE-2026-30943中 4.1Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An insufficient authorization …
• CVE-2026-29084中 4.6Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, the login flow accepts…
• CVE-2026-29061中 5.4Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, a privilege escalation…