filecoin-pin vulnerabilities

1 known vulnerability in filecoin-pin from Filecoin-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  filecoin-pin: Incorrect Authorization

  CVE-2026-58412Oct 30, 2026Filecoin-project

  Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the upload GitHub Action's fork detection in `upload-action/src/build.js` checks only `event.pull_request`. In the documented two-workflow pattern,