CyberSecBulletin

Zhenorzz vulnerabilities

We track 2 vulnerabilities in Zhenorzz products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 31, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Zhenorzz vulnerabilities

  • 7.7 High severity

    goploy: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-53553Zhenorzz

    Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/fileDiff (File Compare), when handling file paths provided by the client. This issue

  • 9.6 Critical severity

    goploy: Authorization Bypass Through User-Controlled Key

    CVE-2026-53552Zhenorzz

    Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile, Project.EditFile, Project.RemoveFile, and Project.Edit in cmd/server/api/project/handler.go accept a project or project-file row id from the JSON body and act