SUSE CVE-2026-29061

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, a privilege escalation vulnerability in the user rank demotion logic allows a demoted user's existing API keys to retain ApiPermManageFileRequests and ApiPermManageLogs permission...

CVE-2026-29061

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, a privilege escalation vulnerability in the user rank demotion logic allows a demoted user's existing API keys to retain ApiPermManageFileRequests and ApiPermManageLogs permission...

CVE-2023-50333

CVE-2023-50333 affects Mattermost Server. Affected component: mattermost/server/v8 (Go module). Root cause: after a user is demoted to guest, the system fails to update the permissions of the current session, allowing freshly demoted guests to change group names. Exposed impact: privilege misalig...