https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:08:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-276013 EUVD-2026-276013 https://cve.radiocsirt.org/vuln/euvd-2026-276013 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30955 <p>Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is fixed in 2.2.4.</p> <p>Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is fixed in 2.2.4.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-30955 https://cve.radiocsirt.org/vuln/ghsa-qwc6-vc2v-2ggj <p><strong>Affected:</strong> Go: github.com/forceu/gokapi</p> <p>### Summary</p> <p>An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users.</p> <p>### Impact</p> <p>Any authenticated user can crash the Gokapi server by sending concurrent large payloads.</p> <p><strong>Affected:</strong> Go: github.com/forceu/gokapi</p> <p>### Summary</p> <p>An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users.</p> <p>### Impact</p> <p>Any authenticated user can crash the Gokapi server by sending concurrent large payloads.</p> https://cve.radiocsirt.org/vuln/ghsa-qwc6-vc2v-2ggj