Advisories · Technology
shiori.
Every CVE that names shiori among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
go-shiori Server-Side Request Forgery via Unrestricted Bookmark URL Fetch
- shiori
- Server-side request forgery (SSRF)
- CVSS 8.2 High
shiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or Demotion
- shiori
- Authentication bypass
- CVSS 8.7 High
Shiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account
- shiori
- Privilege escalation