AlistGo vulnerabilities
We track 2 vulnerabilities in AlistGo products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 4, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest AlistGo vulnerabilities
- 8.8 High severity
alist: Improper Limitation of a Pathname to a Restricted Directory
Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains path traversal vulnerability in multiple file operation handlers. An authenticated attacker can bypass directory-level a
- 7.4 High severity
alist: Improper Certificate Validation
Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables TLS certificate verification by default for all outgoing storage driver communications, making the system vulnerable to