Log in Start free

go-shiori

Products

ProductCVEsExploitedLatest
shiori3–Aug 5, 2026

Exploited and recent CVEs

  • CVE-2026-71280 High 8.5 go-shiori Server-Side Request Forgery via Unrestricted Bookmark URL Fetch 0.3%
  • CVE-2026-71206 High 8.2 shiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or Demotion 0.4%
  • CVE-2026-61463 High 8.8 Shiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account 0.5%