Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Gokapi — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Gokapi, with AI-generated Chinese analysis, references, and POCs.

Vendor: Forceu

CVE IDTitleCVSSSeverityPublished
CVE-2026-30961 Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload CWE-770 4.3 Medium2026-03-13
CVE-2026-30955 Gokapi vulnerable to DoS in E2E Metadata Parser CWE-400 6.5 Medium2026-03-13
CVE-2026-30943 Gokapi has Privilege Escalation in File Replace CWE-863 4.1 Medium2026-03-13
CVE-2026-29084 Gokapi: CSRF in Login Endpoint CWE-352 4.6 Medium2026-03-06
CVE-2026-29061 Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion CWE-284 5.4 Medium2026-03-06
CVE-2026-29060 Gokapi: Privilege escalation with auth token CWE-284 5.0 Medium2026-03-06
CVE-2026-28683 Gokapi: Stored XSS in SVG Hotlinks CWE-79 8.7 High2026-03-06
CVE-2026-28682 Gokapi: Data Leak in Upload Status Stream CWE-284 6.4 Medium2026-03-06
CVE-2025-48495 Gokapi has stored XSS vulnerability in friendly name for API keys CWE-79 4.6AIMediumAI2025-06-02
CVE-2025-48494 Gokapi vulnerable to stored XSS via uploading file with malicious file name CWE-79 5.4AIMediumAI2025-06-02

All 10 known CVE vulnerabilities affecting Gokapi with full Chinese analysis, references, and POCs where available.