Gorse-io vulnerabilities
We track 1 vulnerability in Gorse-io products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 29, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Gorse-io vulnerabilities
- 9.8 Critical severity
gorse: Missing Authentication for Critical Functionality
Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote atta