Gokapi vulnerabilities

1 known vulnerability in Gokapi from Forceu. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Gokapi: Improper Neutralization of Input During Web Page Generation

  CVE-2026-28683Mar 6, 2026Forceu

  Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, if a malicious authenticated user uploads SVG and creates a hotlink for it, they can achieve stored XSS. This issue has been patched in versio