Go/github.com/flipped-aurora/gin-vue-admin CVE-2026-22786: high 7.2, EPSS 1.09%

Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-3558-j79f-vvm6
• nvd: CVE-2026-22786
• https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-3558-j79f-vvm6
• https://github.com/flipped-aurora/gin-vue-admin/commit/2242f5d6e133e96d1b359ac019bf54fa0e975dd5
• https://github.com/flipped-aurora/gin-vue-admin

CVE-2026-22786 · published 2026-01-13T19:15:13Z · modified 2026-02-03T03:01:02.653500Z · JSON