https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T04:52:42.199740+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233581 EUVD-2026-233581 2026-10-08T04:52:42.202533+00:00 EUVD-2026-233581 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39220 fkie_cve-2022-39220 2026-10-08T04:52:42.202564+00:00

SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting (XSS) vulnerabilities in the SFTPGo WebClient, allowing remote attackers to inject malicious code. This issue is patched in version 2.3.5. No known workarounds exist.

 https://cve.radiocsirt.org/vuln/ghsa-cf7g-cm7q-rq7f GHSA-cf7g-cm7q-rq7f — SFTPGo WebClient vulnerable to Cross-site Scripting 2026-10-08T04:52:42.202594+00:00

Affected: Go: github.com/drakkan/sftpgo

### Impact Cross-site scripting (XSS) vulnerabilities have been reported to affect SFTPGo WebClient. If exploited, this vulnerability allows remote attackers to inject malicious code.

### Patches Fixed in v2.3.5.

 https://cve.radiocsirt.org/vuln/gsd-2022-39220 gsd-2022-39220 2026-10-08T04:52:42.202620+00:00 gsd-2022-39220