Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1325 CNY

100%
Buy Us a Coffee

gonic — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in gonic, with AI-generated Chinese analysis, references, and POCs.

Vendor: sentriz

CVE IDTitleCVSSSeverityPublished
CVE-2026-49340 gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host CWE-22 8.1 High2026-06-19
CVE-2026-49338 Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR) CWE-285 7.1 High2026-06-19
CVE-2026-49339 Path traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlist CWE-22 7.1 High2026-06-19

All 3 known CVE vulnerabilities affecting gonic with full Chinese analysis, references, and POCs where available.