sentriz gonic vulnerabilities
4 published CVEs name sentriz gonic among the affected products.
- Published CVEs
- 4
- Last 12 months
- 4
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 1Low 0Not scored 0
Newest CVEs
- CVE-2026-86118
gonic before 0.22.0 Missing Administrator Check on the Subsonic startScan Endpoint
sentriz · gonic
Medium5.3 - CVE-2026-49340
gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host
sentriz · gonic
High8.1 - CVE-2026-49338
Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR)
sentriz · gonic
High7.1 - CVE-2026-49339
Path traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlist
sentriz · gonic
High7.1