Advisories · Technology

perfree go-fastdfs-web.

Every CVE that names perfree go-fastdfs-web among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-11437 CVE record

CVSS 6.9 Medium

perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery
- perfree go-fastdfs-web
- Server-side request forgery (SSRF)
Not analysed yet 6 Jun 2026
CVE-2026-6105 CVE record

CVSS 6.9 Medium

perfree go-fastdfs-web doInstall InstallController.java improper authorization
- perfree go-fastdfs-web
- Privilege escalation
- Broken access control
Not analysed yet 11 Apr 2026
CVE-2026-3963 CVE record

CVSS 6.3 Medium

perfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key
- perfree go-fastdfs-web
- Hard-coded credentials
- CWE-320
Not analysed yet 11 Mar 2026