All 3 CVE vulnerabilities found in goploy, with AI-generated Chinese analysis, references, and POCs.
Vendor: zhenorzz
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-114665 | Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrary File Read via /deploy/fileDiff and /deploy/fileCompare CWE-59 | 6.5 | Medium | 2026-10-22 |
| CVE-2026-53553 | Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise CWE-22 | 7.7 | High | 2026-08-31 |
| CVE-2026-53552 | Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers CWE-639 | 9.6 | Critical | 2026-08-31 |
All 3 known CVE vulnerabilities affecting goploy with full Chinese analysis, references, and POCs where available.