go-fastdfs-web vulnerabilities

2 known vulnerabilities in go-fastdfs-web from Perfree. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  go-fastdfs-web: Server-Side Request Forgery

  CVE-2026-11437Jun 6, 2026Perfree

  A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be execu

• 7.3 High severity

  go-fastdfs-web: Incorrect Privilege Assignment

  CVE-2026-6105Apr 11, 2026Perfree

  A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an unknown part of the file src/main/java/com/perfree/controller/InstallController.java of the component doInstall Interface. The manipulation leads to improper auth