Go/github.com/forceu/gokapi CVE-2026-29084: medium 4.6, EPSS 0.09%

Gokapi has CSRF in Login Endpoint

Action: Upgrade github.com/forceu/gokapi to 2.2.3 or later.

go get github.com/forceu/gokapi@v2.2.3

Affected

Fixed versions

Sources

• osv: GHSA-hcff-qv74-7hr4
• https://github.com/Forceu/Gokapi/security/advisories/GHSA-hcff-qv74-7hr4
• https://nvd.nist.gov/vuln/detail/CVE-2026-29084
• https://github.com/Forceu/Gokapi
• https://github.com/Forceu/Gokapi/releases/tag/v2.2.3

CVE-2026-29084 · published 2026-03-05T20:43:28Z · modified 2026-03-23T04:56:10.262397802Z · JSON