Openlistteam Openlist
7 CVEs affecting Openlistteam Openlist. Latest disclosed: 2026-10-12. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-25059 | High | 8.8 | 2026-02-02 | OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, the application contains path traversal vulnerability in multiple file operation handlers in… |
CVE-2026-25060 | High | 8.1 | 2026-02-02 | OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, certificate verification is disabled by default for all storage driver communications. The T… |
CVE-2026-73509 | High | 7.6 | 2026-08-13 | OpenList a file list program that supports multiple storage. Prior to 4.2.4, the authenticated /api/fs/batch_rename handler in server/handles/fsbatch.go author… |
CVE-2026-75602 | Medium | 6.5 | 2026-09-03 | OpenList a file list program that supports multiple storage. Prior to 4.2.3, OpenList's offline-download feature at POST /api/fs/add_offline_download with tool… |
CVE-2026-69160 | Medium | 6.5 | 2026-08-18 | OpenList a file list program that supports multiple storage. Prior to 4.2.4, the share creation and update checks in server/handles/sharing.go use strings.HasP… |
CVE-2025-50183 | Medium | 6.5 | 2025-06-19 | OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application… |
CVE-2026-102663 | Medium | 4.3 | 2026-10-12 | OpenList is a file list program that supports multiple storage backends. Prior to 4.2.4, the OpenList search API uses a non-separator-aware strings.HasPrefix c… |