227 matches found
EUVD-2026-98781
SFTPGo source-side file-pattern filter bypass during copy operations...
GHSA-WWV9-G5X4-966Q SFTPGo source-side file-pattern filter bypass during copy operations
Summary File pattern filters deniedpatterns / allowedpatterns were evaluated on the destination of a copy only. A user holding the copy permission could copy a file denied by the filters to a permitted name and then read it. A recursive directory copy reproduced the contents of a restricted...
SFTPGo source-side file-pattern filter bypass during copy operations
Summary File pattern filters deniedpatterns / allowedpatterns were evaluated on the destination of a copy only. A user holding the copy permission could copy a file denied by the filters to a permitted name and then read it. A recursive directory copy reproduced the contents of a restricted...
SFTPGo: Denial of service via malformed SSH channel request
Summary A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel. Impact Any user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of...
EUVD-2026-98780
SFTPGo: Denial of service via malformed SSH channel request...
GHSA-Q7PC-356P-HGGC SFTPGo: Denial of service via malformed SSH channel request
Summary A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel. Impact Any user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of...
CVE-2026-103028
SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...
CVE-2026-103028 SFTPGo source-side file-pattern filter bypass during copy operations
SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...
CVE-2026-103028 SFTPGo source-side file-pattern filter bypass during copy operations
SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...
CVE-2026-103028
The open-source file transfer solution SFTPGo (versions 2.5.0 through 2.7.6 ) is vulnerable to a source-side file-pattern filter bypass. An authenticated user with copy permissions can copy files restricted by denied_patterns or those outside allowed_patterns to an allowed destination because fil...
CVE-2026-77375
SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality o...
CVE-2026-77375
The open-source file transfer solution SFTPGo is vulnerable to a Denial of Service (DoS) condition in versions prior to 2.7.5 . An authenticated SSH user can trigger an unhandled error by sending a malformed protocol message while opening a channel. This flaw causes the server process to terminat...
CVE-2026-77375 SFTPGo: Denial of service via malformed SSH channel request
SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality o...
CVE-2026-103028: Incorrect Authorization
SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...
PT-2026-111617
Name of the Vulnerable Software and Affected Versions SFTPGo versions 2.5.0 through 2.7.5 Description An authenticated user with copy permissions can bypass file-pattern filters to copy source files that are restricted by denied patterns or located outside of allowed patterns to an allowed...
PT-2026-111630
Name of the Vulnerable Software and Affected Versions SFTPGo versions prior to 2.7.5 Description An authenticated SSH user can send a malformed protocol message during the channel opening process. This action triggers an unhandled error that terminates the server process, resulting in a denial of...
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: gogatekeeper, caddy-fips, step, kyverno-policy-reporter-ui, dapr-fips, step-issuer-fips, sftpgo, tkn-fips, tkn, rclone, step-ca, rclone-fips, step-fips, step-issuer, dapr, telegraf, kyverno-policy-reporter-ui-fips, buf, step-ca-fips, gitness, cloudflared, caddy, karm...
GHSA-XCVF-46F4-XWXF vulnerabilities
Vulnerabilities for packages: gogatekeeper, caddy-fips, step, kyverno-policy-reporter-ui, dapr-fips, step-issuer-fips, sftpgo, tkn-fips, tkn, rclone, step-ca, rclone-fips, step-fips, step-issuer, dapr, telegraf, kyverno-policy-reporter-ui-fips, buf, step-ca-fips, gitness, cloudflared, caddy, karm...
