Openlistteam Openlist
5 CVEs affecting Openlistteam Openlist. Latest disclosed: 2026-08-18. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-25059 | High | 8.8 | 2026-02-02 | OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, the application contains path traversal vulnerability in multiple file operation handlers in… |
CVE-2026-25060 | High | 8.1 | 2026-02-02 | OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, certificate verification is disabled by default for all storage driver communications. The T… |
CVE-2026-73509 | High | 7.6 | 2026-08-13 | OpenList a file list program that supports multiple storage. Prior to 4.2.4, the authenticated /api/fs/batch_rename handler in server/handles/fsbatch.go author… |
CVE-2026-69160 | Medium | 6.5 | 2026-08-18 | OpenList a file list program that supports multiple storage. Prior to 4.2.4, the share creation and update checks in server/handles/sharing.go use strings.HasP… |
CVE-2025-50183 | Medium | 6.5 | 2025-06-19 | OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application… |