GO-2026-4414 Alist has Insecure TLS Config in github.com/alist-org/alist

Alist has Insecure TLS Config in github.com/alist-org/alist...

Arbitrary File Upload

github.com/alist-org/alist is vulnerable to arbitrary file upload. The vulnerability exists as the file upload permission is not properly validated, allowing an attacker to upload malicious files to any folder...