Moderate severityOSV Advisory· Published Jan 9, 2026· Updated Jan 9, 2026
CVE-2025-60538
CVE-2025-60538
Description
A lack of rate limiting in the login page of shiori v1.7.4 and below allows attackers to bypass authentication via a brute force attack.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/go-shiori/shioriGo | <= 1.7.4 | — |
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- github.com/advisories/GHSA-mw8h-g64c-rxv4ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-60538ghsaADVISORY
- github.com/go-shiori/shiori/issues/1138ghsaWEB
News mentions
0No linked articles in our index yet.