Forceu vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 20268

Newest CVEs

• CVE-2026-30961

  Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload

  Forceu · Gokapi

  Medium4.3
• CVE-2026-30955

  Gokapi vulnerable to DoS in E2E Metadata Parser

  Forceu · Gokapi

  Medium6.5
• CVE-2026-30943

  Gokapi has Privilege Escalation in File Replace

  Forceu · Gokapi

  Medium4.1
• CVE-2026-29084

  Gokapi: CSRF in Login Endpoint

  Forceu · Gokapi

  Medium4.6
• CVE-2026-29061

  Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion

  Forceu · Gokapi

  Medium5.4
• CVE-2026-29060

  Gokapi: Privilege escalation with auth token

  Forceu · Gokapi

  Medium5.0
• CVE-2026-28683

  Gokapi: Stored XSS in SVG Hotlinks

  Forceu · Gokapi

  High8.7
• CVE-2026-28682

  Gokapi: Data Leak in Upload Status Stream

  Forceu · Gokapi

  Medium6.4
• CVE-2025-48495

  Gokapi has stored XSS vulnerability in friendly name for API keys

  Forceu · Gokapi

  Medium4.8
• CVE-2025-48494

  Gokapi vulnerable to stored XSS via uploading file with malicious file name

  Forceu · Gokapi

  Medium4.8