Daptin has Unauthenticated Path Traversal and Zip Slip in github.com/daptin/daptin

概要

参考情報

• daptin/daptin security advisory · ADVISORY
• daptin/daptin commit 8d626bb · FIX

github.com/daptin/daptin のその他の脆弱性

• CVE-2026-62160高 8.7Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `LanguageMiddleware` in `server/language.go` passes the raw `Accept-…
• GO-2026-4991Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change in github.com/daptin/daptin
• CVE-2026-44349高 7.1Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.5, processFuzzySearch in server/resource/resource_findallpaginated.go:1484 …
• CVE-2026-41422高 8.3Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.4, the /aggregate/:typename endpoint accepted column and group query parame…
• GHSA-258c-965c-p3hc中 6.5Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change