Lanyulei vulnerabilities
We track 3 vulnerabilities in Lanyulei products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest Lanyulei vulnerabilities
- 7.3 High severity
ferry: Improper Authentication
A vulnerability was found in lanyulei ferry 1.0.0-beta.1/1.0.0. Affected is an unknown function of the file middleware/auth.go of the component JWT Validation. The manipulation results in improper authentication. The attack can be executed remotely. The exploi
- 9.8 Critical severity
ferry: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. The manipulation of the argument file_name leads to path traversal. The associated identifier of this vulnerabilit
- 9.8 Critical severity
ferry: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The a