Vulnerabilities in bufanyun

3 results

CVE-2026-120447CRITICALHotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification CodeEPSS 0.5%CVE-2026-5253MEDIUMbufanyun HotGo editNotice Endpoint MessageList.vue cross site scriptingEPSS 0.2%CVE-2026-3683MEDIUMbufanyun HotGo Endpoint upload.go ImageTransferStorage server-side request forgeryEPSS 0.2%