GO-2026-4396
NoneCVSS
—
EPSS
—
Published
Feb 5, 2026
CISA due date
—
The record
OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/OpenListTeam/OpenList | 0 | No fix |
| Go | github.com/OpenListTeam/OpenList/v3 | 0 | No fix |
| Go | github.com/OpenListTeam/OpenList/v4 | 0 | 4.1.10 |
Related vulnerabilities
- CVE-2026-25059 OpenList Frontend is a UI component for OpenList. Same vulnerability
- GO-2026-4397 OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList Also affects github.com/OpenListTeam/OpenList
- CVE-2026-25060 OpenList Frontend is a UI component for OpenList. Also affects github.com/OpenListTeam/OpenList