VYPR

wiki-go

by Leomoon Studios

CVEs (4)

  • CVE-2026-114376MedOct 21, 2026
    risk 0.34cvss 6.3epss —

    A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function SaveHandler/SourceHandler of the file internal/handlers/editor.go of the component API. Executing a manipulation can lead to path traversal. The attack can be…

  • CVE-2026-114375MedOct 21, 2026
    risk 0.34cvss 6.3epss —

    A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the component Files Rename API. Performing a manipulation of the argument currentPath/newName results in path…

  • CVE-2026-114374MedOct 21, 2026
    risk 0.21cvss 4.3epss —

    A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadata_api.go of the component fetch-metadata Endpoint. Such manipulation leads to server-side request forgery. It is possible to launch the…

  • CVE-2026-114377LowOct 21, 2026
    risk 0.18cvss 3.8epss —

    A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go of the component Comment Deletion Handler. The manipulation of the argument documentPath leads to…