Go/github.com/flipped-aurora/gin-vue-admin CVE-2025-66410: critical 9.1, EPSS 0.58%

Gin-vue-admin has an arbitrary file deletion vulnerability

Action: Upgrade github.com/flipped-aurora/gin-vue-admin to 0.9.1-0.20251201084432-ee8d8d7e04d9 or later.

go get github.com/flipped-aurora/gin-vue-admin@v0.9.1-0.20251201084432-ee8d8d7e04d9

Affected

Fixed versions

Sources

• osv: GHSA-jrhg-82w2-vvj7
• nvd: CVE-2025-66410
• https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-jrhg-82w2-vvj7
• https://github.com/flipped-aurora/gin-vue-admin/commit/ee8d8d7e04d9c38a35a6969f20e75213e84f57c6
• https://github.com/flipped-aurora/gin-vue-admin

CVE-2025-66410 · published 2025-12-02T01:08:48Z · modified 2025-12-03T19:43:47.214960Z · JSON