github.com/flipped-aurora/gin-vue-admin
Go4 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/flipped-aurora/gin-vue-adminpage 1 of 1
- CVE-2022-47762HIGHCVSS 7.5EG 7.5✓ Fixed in 2.5.5+incompatible2023-02-03
In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.
- CVE-2024-37896HIGHCVSS 8.8EG 8.8✓ Fixed in 2.6.6+incompatible2024-06-17
Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.6.5 has SQL injection vulnerability. The SQL injection vulnerabilities occur when a web application allows users to input data into SQL queries withou…
- CVE-2025-66410CRITICALCVSS 9.1EG 9.1✓ Fixed in 0.9.1-0.20251201084432-ee8d8d7e04d92025-12-01
Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' param…
- CVE-2026-22786HIGHCVSS 7.2EG 7.22026-01-12
Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.8.7 has a path traversal vulnerability in the breakpoint resume upload functionality. Attacker can upload any files on any directory. In the breakpoin…
Check whether github.com/flipped-aurora/gin-vue-admin is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/flipped-aurora/gin-vue-admin CVEs against the assets you own.
Start Free Scan →