VYPR

mayfly-go

by Dromara

Source repositories

CVEs (2)

  • CVE-2026-92993MedSep 17, 2026
    risk 0.34cvss 6.3epss 0.01

    A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machine_script.go of the component Machine Script Feature. The manipulation of the argument params results in os command…

  • CVE-2026-92992MedSep 17, 2026
    risk 0.34cvss 6.3epss 0.00

    A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is…