{"id":4065486,"name":"github.com/forceu/gokapi","ecosystem":"go","description":"","homepage":"https://github.com/forceu/gokapi","licenses":"AGPL-3.0","normalized_licenses":["AGPL-3.0"],"repository_url":"https://github.com/forceu/gokapi","keywords_array":[],"namespace":"github.com/forceu","versions_count":31,"first_release_published_at":"2021-03-12T15:23:30.000Z","latest_release_published_at":"2024-12-18T14:31:12.000Z","latest_release_number":"v1.9.6","last_synced_at":"2026-06-25T11:14:28.625Z","created_at":"2022-04-12T11:11:01.105Z","updated_at":"2026-06-26T00:14:23.275Z","registry_url":"https://pkg.go.dev/github.com/forceu/gokapi","install_command":"go get github.com/forceu/gokapi","documentation_url":"https://pkg.go.dev/github.com/forceu/gokapi#section-documentation","metadata":{},"repo_metadata":{"id":40502756,"uuid":"347000736","full_name":"Forceu/Gokapi","owner":"Forceu","description":"Lightweight selfhosted Firefox Send alternative without public upload. AWS S3 supported.","archived":false,"fork":false,"pushed_at":"2025-08-06T18:36:23.000Z","size":5561,"stargazers_count":2181,"open_issues_count":23,"forks_count":102,"subscribers_count":13,"default_branch":"master","last_synced_at":"2025-08-06T20:37:46.957Z","etag":null,"topics":["backblaze-b2","docker","download","firefox-send","golang","ownyourdata","s3-storage","self-hosted","selfhosted","ssl","uploader"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Forceu.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null},"funding":{"liberapay":"MBulling","custom":["https://www.paypal.com/cgi-bin/webscr?cmd=_donations\u0026business=donate@bulling.mobi\u0026lc=US\u0026item_name=Gokapi\u0026no_note=0\u0026cn=\u0026currency_code=EUR\u0026bn=PP-DonationsBF:btn_donateCC_LG.gif:NonHosted"]}},"created_at":"2021-03-12T08:52:52.000Z","updated_at":"2025-08-06T10:42:54.000Z","dependencies_parsed_at":"2023-11-28T13:45:04.128Z","dependency_job_id":"19fec035-5ca9-4e49-b399-65014bc3209b","html_url":"https://github.com/Forceu/Gokapi","commit_stats":{"total_commits":381,"total_committers":9,"mean_commits":"42.333333333333336","dds":"0.023622047244094446","last_synced_commit":"0e80a59e1573da1cb866bbcce9c47ec2c7afaec3"},"previous_names":[],"tags_count":36,"template":false,"template_full_name":null,"purl":"pkg:github/Forceu/Gokapi","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Forceu","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":269155105,"owners_count":24369366,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-06T02:00:09.910Z","response_time":99,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"Forceu","name":"Marc Ole Bulling","uuid":"1593467","kind":"user","description":"","email":"","website":null,"location":"Düsseldorf, Germany","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1593467?u=bbd844a3508f7fa4006ad1bdc695334c4abde72b\u0026v=4","repositories_count":6,"last_synced_at":"2023-03-06T17:13:11.161Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/Forceu","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-16T18:59:53.998Z","updated_at":"2023-03-06T17:13:11.167Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Forceu","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Forceu/repositories"},"tags":[{"name":"v2.0.1","sha":"5f22cfe748d06b0390caae8a402f7ad7ea3e0075","kind":"commit","published_at":"2025-06-08T14:30:29.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v2.0.1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"a2c032ed0746c34c4069fb9c2371921b55fa3882","kind":"commit","published_at":"2025-05-31T11:47:45.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v2.0.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta2","sha":"ba54607e92dcd9441335b69d2fd3de16b4c9a556","kind":"commit","published_at":"2025-05-19T18:49:11.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v2.0.0-beta2","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v2.0.0-beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v2.0.0-beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v2.0.0-beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v2.0.0-beta2/manifests"},{"name":"v2.0.0-beta1","sha":"d88f64920994cbe5be59af434da59e94463f3508","kind":"commit","published_at":"2025-02-04T08:22:55.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v2.0.0-beta1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v2.0.0-beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v2.0.0-beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v2.0.0-beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v2.0.0-beta1/manifests"},{"name":"v1.9.6","sha":"34873b568008fd28e36759881b9452a2bdf667c4","kind":"commit","published_at":"2024-12-18T14:31:12.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.9.6","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.9.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.9.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.6/manifests"},{"name":"v1.9.5","sha":"5a2c0974604b7546d2d12b3ab71c32418524df2f","kind":"commit","published_at":"2024-12-08T15:19:27.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.9.5","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.9.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.9.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.5/manifests"},{"name":"v1.9.4","sha":"945b50cb5ecef4b5a0f053b0bb4c605b04e51587","kind":"commit","published_at":"2024-12-07T19:57:36.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.9.4","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.9.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.9.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.4/manifests"},{"name":"v1.9.3","sha":"94ef26027c2742c44ff182c6f935ccd5f2fb9727","kind":"commit","published_at":"2024-12-07T08:27:06.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.9.3","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.9.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.9.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.3/manifests"},{"name":"v1.9.2","sha":"0e80a59e1573da1cb866bbcce9c47ec2c7afaec3","kind":"commit","published_at":"2024-09-30T16:02:00.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.9.2","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.2/manifests"},{"name":"v1.9.1","sha":"31309178295f63b66a85ce605316085e564b6a74","kind":"commit","published_at":"2024-07-29T17:51:05.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.9.1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.1/manifests"},{"name":"v1.9.0","sha":"94def515ca4a8fada0df0f10f5d715707ca12398","kind":"commit","published_at":"2024-07-15T11:30:28.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.9.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.9.0/manifests"},{"name":"v1.8.4","sha":"08a81fa4543993c9576589c8efc5344893265855","kind":"commit","published_at":"2024-05-29T11:49:06.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.8.4","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.8.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.8.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.4/manifests"},{"name":"v1.8.3","sha":"83185a9a2f640dad68217b7e737206e2db3e8c60","kind":"commit","published_at":"2024-05-27T14:48:16.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.8.3","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.8.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.8.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.3/manifests"},{"name":"v1.8.2","sha":"99e10345e73b86d2292fc6a5cd455b695b4d46b4","kind":"commit","published_at":"2024-04-20T13:41:18.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.8.2","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.8.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.2/manifests"},{"name":"v1.8.1","sha":"a08cd2e8f18f7d5bd6d839ba18f49bcb7cab43e4","kind":"commit","published_at":"2024-02-07T15:27:40.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.8.1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.1/manifests"},{"name":"v1.8.0","sha":"d4ad93ba0117dbcff25763a5c54b67f10d9c6ca8","kind":"commit","published_at":"2023-12-09T13:03:45.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.8.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.0/manifests"},{"name":"v1.8.0-beta.0","sha":"1d0bde6644da84e0c7c6473cc6dac6c5024de317","kind":"commit","published_at":"2023-11-21T19:50:30.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.8.0-beta.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.8.0-beta.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.8.0-beta.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.0-beta.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.8.0-beta.0/manifests"},{"name":"v1.7.2","sha":"59271c2ff2af9f550904eae617943933af7edb9b","kind":"commit","published_at":"2023-05-13T12:33:37.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.7.2","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.7.2/manifests"},{"name":"v1.7.1","sha":"1e75b9641dc0369dd61d040b71992b03adb9d0e6","kind":"commit","published_at":"2023-04-14T17:42:26.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.7.1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.7.1/manifests"},{"name":"v1.7.0","sha":"d2eae38b504538a8898a9fbebe891c894f61d9fb","kind":"commit","published_at":"2023-04-14T14:05:29.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.7.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.7.0/manifests"},{"name":"v1.6.2","sha":"7fe7f6158bae521ec2a0e6ada5d52e0795d158ae","kind":"commit","published_at":"2023-02-13T22:52:39.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.6.2","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.6.2/manifests"},{"name":"v1.6.1","sha":"522c4b817ad99465ea3b680c276e1c1d3c6f8b02","kind":"commit","published_at":"2022-08-17T20:53:24.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.6.1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.6.1/manifests"},{"name":"v1.6.0","sha":"ebda2fe1663629520662ae590ca48e8e554def70","kind":"commit","published_at":"2022-08-17T13:09:32.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.6.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.6.0/manifests"},{"name":"v1.6.0-beta1","sha":"8da7fe4fcb56165d84df24461a8125b1e80a6cf3","kind":"commit","published_at":"2022-08-11T12:01:47.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.6.0-beta1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.6.0-beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.6.0-beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.6.0-beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.6.0-beta1/manifests"},{"name":"v1.5.2","sha":"b1b38ba1605d326a011738a06b18e0e437429ae3","kind":"commit","published_at":"2022-06-08T08:28:27.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.5.2","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.5.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.5.2/manifests"},{"name":"v1.5.1","sha":"f22f95a9935cd7dc0a97ef5bc6cf337fd595168e","kind":"commit","published_at":"2022-03-10T15:27:37.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.5.1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.5.1/manifests"},{"name":"v1.5.0","sha":"dc246f444fafb7eb59243f030014eb82e9c41035","kind":"commit","published_at":"2022-03-08T17:51:01.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.5.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.5.0/manifests"},{"name":"v1.5.0-beta1","sha":"58c1e2aa56a78efb2dc9a8e2359a40e15adfcac8","kind":"commit","published_at":"2022-02-24T13:53:02.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.5.0-beta1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.5.0-beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.5.0-beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.5.0-beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.5.0-beta1/manifests"},{"name":"v1.3.1","sha":"18902ac95430ef12b69cbf40a7ea190e66043e3f","kind":"commit","published_at":"2021-07-03T15:36:28.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.3.1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"8c2b893efeb541c99399f1baf61e1edfa44d0db1","kind":"commit","published_at":"2021-05-17T09:44:53.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.3.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"e6c3cfdc685623d6a0b480e404050c579834af93","kind":"commit","published_at":"2021-05-07T14:53:41.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.2.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.2.0/manifests"},{"name":"v1.1.3","sha":"6097c27d3b0c57d1edf99fc1819cc52a5b167f09","kind":"commit","published_at":"2021-04-08T07:36:40.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.1.3","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.1.3/manifests"},{"name":"v1.1.2","sha":"867029512e7d7cbb785be0af5ff102855e500879","kind":"commit","published_at":"2021-04-03T13:01:28.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.1.2","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.1.2/manifests"},{"name":"v1.1.0","sha":"9bdfb0b769661480d17b20ca616e2b2ce1cf13f3","kind":"commit","published_at":"2021-03-18T14:29:39.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.1.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"da168057728a3e270e8352a0955f7fbf18501be8","kind":"commit","published_at":"2021-03-12T15:23:30.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.0.1","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.0.1/manifests"},{"name":"v1.0","sha":"97c141c9c62b6dd6a39b74381db93a50916de83d","kind":"commit","published_at":"2021-03-12T11:52:05.000Z","download_url":"https://codeload.github.com/Forceu/Gokapi/tar.gz/v1.0","html_url":"https://github.com/Forceu/Gokapi/releases/tag/v1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/Forceu/Gokapi@v1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/tags/v1.0/manifests"}]},"repo_metadata_updated_at":"2025-08-06T20:54:13.241Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":1.775908295615109,"forks_count":2.842193982965915,"average":5.240775635579667},"purl":"pkg:golang/github.com/forceu/gokapi","advisories":[{"uuid":"GSA_kwCzR0hTQS00NXZoLXJwYzgtaHhwcM4ABTlh","url":"https://github.com/advisories/GHSA-45vh-rpc8-hxpp","title":"Gokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload","description":"### Summary\n\nThe chunked upload completion path for file requests does not validate the total file size against the per-request `MaxSize` limit. An attacker with a public file request link can split an oversized file into chunks each under `MaxSize` and upload them sequentially, bypassing the size restriction entirely. Files up to the server's global `MaxFileSizeMB` are accepted regardless of the file request's configured limit.\n\n### Impact\n\nAny guest with access to a shared file request link can upload files far larger than the administrator-configured size limit, up to the server's global `MaxFileSizeMB`. This allows unauthorized storage consumption, circumvention of administrative resource policies, and potential service disruption through storage exhaustion. No data exposure or privilege escalation occurs.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-03-13T18:56:51.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-45vh-rpc8-hxpp","https://github.com/Forceu/Gokapi/releases/tag/v2.2.4","https://nvd.nist.gov/vuln/detail/CVE-2026-30961","https://pkg.go.dev/vuln/GO-2026-4695","https://github.com/advisories/GHSA-45vh-rpc8-hxpp"],"source_kind":"github","identifiers":["GHSA-45vh-rpc8-hxpp","CVE-2026-30961"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-13T19:00:09.148Z","updated_at":"2026-06-22T18:02:16.610Z","epss_percentage":0.00253,"epss_percentile":0.16422,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00NXZoLXJwYzgtaHhwcM4ABTlh","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00NXZoLXJwYzgtaHhwcM4ABTlh","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"2.2.4","vulnerable_version_range":"\u003c= 2.2.3"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00NXZoLXJwYzgtaHhwcM4ABTlh/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xd2M2LXZjMnYtMmdnas4ABTlg","url":"https://github.com/advisories/GHSA-qwc6-vc2v-2ggj","title":"Gokapi vulnerable to DoS in E2E Metadata Parser","description":"### Summary\n\nAn API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users.\n\n\n### Impact\n\nAny authenticated user can crash the Gokapi server by sending concurrent large payloads.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-03-13T18:56:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-qwc6-vc2v-2ggj","https://github.com/Forceu/Gokapi/releases/tag/v2.2.4","https://nvd.nist.gov/vuln/detail/CVE-2026-30955","https://pkg.go.dev/vuln/GO-2026-4698","https://github.com/advisories/GHSA-qwc6-vc2v-2ggj"],"source_kind":"github","identifiers":["GHSA-qwc6-vc2v-2ggj","CVE-2026-30955"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-13T19:00:09.148Z","updated_at":"2026-06-22T18:02:16.611Z","epss_percentage":0.00248,"epss_percentile":0.15778,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xd2M2LXZjMnYtMmdnas4ABTlg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xd2M2LXZjMnYtMmdnas4ABTlg","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"2.2.4","vulnerable_version_range":"\u003c= 2.2.3"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xd2M2LXZjMnYtMmdnas4ABTlg/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qNmpwLTc4dzgtMzR4Ns4ABTlf","url":"https://github.com/advisories/GHSA-j6jp-78w8-34x6","title":"Gokapi vulnerable to Privilege Escalation in File Replace","description":"## Summary\n\nAn insufficient authorization check in the file replace API allows a user with only list visibility permission (`UserPermListOtherUploads`) to delete another user's file by abusing the `deleteNewFile` flag, bypassing the requirement for `UserPermDeleteOtherUploads`.\n\n### Impact\n\nAny authenticated user with `PERM_REPLACE` (replace own files) and `PERM_LIST` (view other users' uploads) can delete any other user's file without needing `PERM_DELETE`.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-03-13T18:56:32.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-j6jp-78w8-34x6","https://github.com/Forceu/Gokapi/releases/tag/v2.2.4","https://nvd.nist.gov/vuln/detail/CVE-2026-30943","https://pkg.go.dev/vuln/GO-2026-4696","https://github.com/advisories/GHSA-j6jp-78w8-34x6"],"source_kind":"github","identifiers":["GHSA-j6jp-78w8-34x6","CVE-2026-30943"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-13T19:00:09.148Z","updated_at":"2026-06-22T18:02:16.611Z","epss_percentage":0.00179,"epss_percentile":0.07572,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNmpwLTc4dzgtMzR4Ns4ABTlf","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qNmpwLTc4dzgtMzR4Ns4ABTlf","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"2.2.4","vulnerable_version_range":"\u003c= 2.2.3"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNmpwLTc4dzgtMzR4Ns4ABTlf/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oY2ZmLXF2NzQtN2hyNM4ABTPV","url":"https://github.com/advisories/GHSA-hcff-qv74-7hr4","title":"Gokapi has CSRF in Login Endpoint","description":"### Summary\nThe login flow accepts credential-bearing requests without CSRF protection mechanisms tied to the browser session context. The handler parses form values directly and creates a session on successful credential validation.\n\n*Issue found by [aisafe.io](aisafe.io)*\n\n### Impact\nAn attacker can force a victim browser into a session associated with an existing user account where the attacker knows the credentials, causing user confusion, activity misattribution, and potential misuse of trusted user actions.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-03-05T20:43:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.6,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-hcff-qv74-7hr4","https://nvd.nist.gov/vuln/detail/CVE-2026-29084","https://github.com/Forceu/Gokapi/releases/tag/v2.2.3","https://github.com/advisories/GHSA-hcff-qv74-7hr4"],"source_kind":"github","identifiers":["GHSA-hcff-qv74-7hr4","CVE-2026-29084"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-05T21:00:07.950Z","updated_at":"2026-06-22T18:02:28.211Z","epss_percentage":0.00076,"epss_percentile":0.00154,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oY2ZmLXF2NzQtN2hyNM4ABTPV","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oY2ZmLXF2NzQtN2hyNM4ABTPV","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003c 2.2.3"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oY2ZmLXF2NzQtN2hyNM4ABTPV/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xNjU4LWhmcGctMzVxY84ABTPU","url":"https://github.com/advisories/GHSA-q658-hfpg-35qc","title":"Gokapi has privilege escalation via incomplete API-key permission revocation on user rank demotion","description":"### Summary\nA privilege escalation vulnerability in the user rank demotion logic allows a demoted user's existing API keys to retain ApiPermManageFileRequests and ApiPermManageLogs permissions, enabling continued access to upload-request management  and log viewing endpoints after the user has been stripped of all privileges.\n\n### Impact\nAny user who previously held Admin rank and had API keys with ApiPermManageFileRequests or ApiPermManageLogs retains those capabilities after demotion. This allows offboarded or demoted users to:\n  - Create, list, and delete upload requests\n  - Read application logs and system status","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-03-05T20:42:32.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-q658-hfpg-35qc","https://nvd.nist.gov/vuln/detail/CVE-2026-29061","https://github.com/Forceu/Gokapi/releases/tag/v2.2.3","https://github.com/advisories/GHSA-q658-hfpg-35qc"],"source_kind":"github","identifiers":["GHSA-q658-hfpg-35qc","CVE-2026-29061"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-05T21:00:07.950Z","updated_at":"2026-06-22T18:02:28.212Z","epss_percentage":0.00116,"epss_percentile":0.01906,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xNjU4LWhmcGctMzVxY84ABTPU","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xNjU4LWhmcGctMzVxY84ABTPU","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003c 2.2.3"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xNjU4LWhmcGctMzVxY84ABTPU/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tMmh4LXdqeGMtOWZwNM4ABTPM","url":"https://github.com/advisories/GHSA-m2hx-wjxc-9fp4","title":"Gokapi has privilege escalation with auth token","description":"### Impact\nA registered user without privileges to create or modify file requests is able to create a short-lived API key that has the permission to do so.\n\nThe user must be registered with Gokapi. If you do not have any other users with access to the admin/upload menu, you are not  impacted.\n\n### Patches\nThis CVE is patched in v2.2.3","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-03-05T18:57:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.0,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-m2hx-wjxc-9fp4","https://nvd.nist.gov/vuln/detail/CVE-2026-29060","https://github.com/Forceu/Gokapi/releases/tag/v2.2.3","https://github.com/advisories/GHSA-m2hx-wjxc-9fp4"],"source_kind":"github","identifiers":["GHSA-m2hx-wjxc-9fp4","CVE-2026-29060"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-05T19:00:08.054Z","updated_at":"2026-06-22T18:02:28.214Z","epss_percentage":0.00137,"epss_percentile":0.03392,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tMmh4LXdqeGMtOWZwNM4ABTPM","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tMmh4LXdqeGMtOWZwNM4ABTPM","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003c 2.2.3"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tMmh4LXdqeGMtOWZwNM4ABTPM/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zYzIyLTVqNW0tNGpxN84ABTPL","url":"https://github.com/advisories/GHSA-3c22-5j5m-4jq7","title":"Gokapi has Stored XSS in SVG Hotlinks","description":"### Summary\nIf a malicious authenticated user uploads SVG and creates a hotlink for it, they achieve stored XSS.\n\n### Details\nThe hotlinking functionality fails to properly handle scripts included in the SVGs, allowing authenticated attackers with the ability to upload and hotlink file to execute arbitrary JS.\n\n*Issue found by [aisafe.io](https://aisafe.io/)*\n\n\n### Impact\nAuthenticated attackers with the ability to upload and hotlink files can execute arbitrary JavaScript.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-03-05T18:40:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-3c22-5j5m-4jq7","https://nvd.nist.gov/vuln/detail/CVE-2026-28683","https://github.com/Forceu/Gokapi/releases/tag/v2.2.3","https://github.com/advisories/GHSA-3c22-5j5m-4jq7"],"source_kind":"github","identifiers":["GHSA-3c22-5j5m-4jq7","CVE-2026-28683"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-05T19:00:08.054Z","updated_at":"2026-06-22T18:02:28.214Z","epss_percentage":0.00189,"epss_percentile":0.08583,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zYzIyLTVqNW0tNGpxN84ABTPL","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0zYzIyLTVqNW0tNGpxN84ABTPL","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003c 2.2.3"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zYzIyLTVqNW0tNGpxN84ABTPL/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jMzZjLTdwYzItZjJwaM4ABTPK","url":"https://github.com/advisories/GHSA-c36c-7pc2-f2ph","title":"Gokapi has Data Leak in Upload Status Stream","description":"## Description\n\nThe upload status SSE implementation on `/uploadStatus` publishes global upload state to any authenticated listener and includes `file_id` values that are not scoped to the requesting user. \n\n## Impact\n\nAny authenticated user can observe other users' file identifiers and retrieve unauthorized content, causing cross-tenant data exposure and loss of confidentiality for uploaded documents.\n\n*Issue found by [aisafe.io](https://aisafe.io)*","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-03-05T18:37:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-c36c-7pc2-f2ph","https://nvd.nist.gov/vuln/detail/CVE-2026-28682","https://github.com/Forceu/Gokapi/releases/tag/v2.2.3","https://github.com/advisories/GHSA-c36c-7pc2-f2ph"],"source_kind":"github","identifiers":["GHSA-c36c-7pc2-f2ph","CVE-2026-28682"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-05T19:00:08.054Z","updated_at":"2026-06-22T18:02:28.215Z","epss_percentage":0.00133,"epss_percentile":0.03111,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jMzZjLTdwYzItZjJwaM4ABTPK","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jMzZjLTdwYzItZjJwaM4ABTPK","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003c 2.2.3"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jMzZjLTdwYzItZjJwaM4ABTPK/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05NXJjLXdjMzItZ201M84ABIk0","url":"https://github.com/advisories/GHSA-95rc-wc32-gm53","title":"Gokapi vulnerable to stored XSS via uploading file with malicious file name","description":"### Impact\n\nWhen using end-to-end encryption, a stored XSS vulnerability can be exploited by uploading a file with JavaScript code embedded in the filename. After upload and every time someone opens the upload list, the script is then parsed.\n\nWith the affected versions \u003cv2.0, there was no user permission system implemented, therefore all authenticated users were already able to see and modify all resources, even if end-to-end encrypted, as the encryption key had to be the same for all users with \u003cv2.0. Nethertheless with XSS, other attack vectors like redirection or crypto mining would be possble.\n\n### Patches\n\nThis CVE has been fixed in v2.0.0\n\n### Workarounds\n\nIf you are the only authenticated user using Gokapi, you are not affected. A workaround would be to disable end-to-end encryption.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-06-03T06:28:08.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.8,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-95rc-wc32-gm53","https://nvd.nist.gov/vuln/detail/CVE-2025-48494","https://github.com/Forceu/Gokapi/commit/343cc566cfd7f4efcd522c92371561d494aed6b0","https://github.com/Forceu/Gokapi/releases/tag/v2.0.0","https://pkg.go.dev/vuln/GO-2025-3737","https://github.com/advisories/GHSA-95rc-wc32-gm53"],"source_kind":"github","identifiers":["GHSA-95rc-wc32-gm53","CVE-2025-48494"],"repository_url":"https://github.com/Forceu/Gokapi","blast_radius":1.0,"created_at":"2025-06-03T07:08:40.591Z","updated_at":"2026-06-26T00:03:46.779Z","epss_percentage":0.0014,"epss_percentile":0.03621,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NXJjLXdjMzItZ201M84ABIk0","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05NXJjLXdjMzItZ201M84ABIk0","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"0.0.0-20250530191232-343cc566cfd7","vulnerable_version_range":"\u003c 0.0.0-20250530191232-343cc566cfd7"},{"first_patched_version":null,"vulnerable_version_range":"\u003e= 1.0.1, \u003c= 1.9.6"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NXJjLXdjMzItZ201M84ABIk0/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00eGc0LTU0aG0tOWo3N84ABIkz","url":"https://github.com/advisories/GHSA-4xg4-54hm-9j77","title":"Gokapi has stored XSS vulnerability in friendly name for API keys","description":"### Impact\n\nBy renaming the friendly name of an API key, an authenticated user could inject JS into the API key overview, which would also be executed when another user clicks on his API tab.\nWith the affected versions \u003cv2.0, there was no user permission system implemented, therefore all authenticated users were already able to see and modify all resources, even if end-to-end encrypted, as the encryption key had to be the same for all users with \u003cv2.0. Nethertheless with XSS, other attack vectors like redirection or crypto mining would be possble.\n\n### Patches\n\nThis CVE has been fixed in v2.0.0\n\n### Workarounds\n\nIf you are the only authenticated user using Gokapi, you are not affected. A workaround would be to not open the API page if you suspect that another user might have injected code.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-06-03T06:27:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.8,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L","references":["https://github.com/Forceu/Gokapi/security/advisories/GHSA-4xg4-54hm-9j77","https://nvd.nist.gov/vuln/detail/CVE-2025-48495","https://github.com/Forceu/Gokapi/commit/65ddbc68fbfdf1c80cadb477f4bcbb7f2c4fdbf8","https://pkg.go.dev/vuln/GO-2025-3736","https://github.com/advisories/GHSA-4xg4-54hm-9j77"],"source_kind":"github","identifiers":["GHSA-4xg4-54hm-9j77","CVE-2025-48495"],"repository_url":"https://github.com/Forceu/Gokapi","blast_radius":1.0,"created_at":"2025-06-03T07:08:41.068Z","updated_at":"2026-06-22T18:04:23.061Z","epss_percentage":0.00117,"epss_percentile":0.01933,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00eGc0LTU0aG0tOWo3N84ABIkz","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00eGc0LTU0aG0tOWo3N84ABIkz","packages":[{"ecosystem":"go","package_name":"github.com/forceu/gokapi","versions":[{"first_patched_version":"0.0.0-20250530185940-65ddbc68fbfd","vulnerable_version_range":"\u003c 0.0.0-20250530185940-65ddbc68fbfd"},{"first_patched_version":null,"vulnerable_version_range":"\u003e= 1.0.1, \u003c= 1.9.6"}],"purl":"pkg:go/github.com%2Fforceu%2Fgokapi"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00eGc0LTU0aG0tOWo3N84ABIkz/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/forceu/gokapi","docker_dependents_count":1,"docker_downloads_count":32,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/forceu/gokapi","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/forceu/gokapi/dependencies","status":null,"funding_links":["https://liberapay.com/MBulling","https://www.paypal.com/cgi-bin/webscr?cmd=_donations\u0026business=donate@bulling.mobi\u0026lc=US\u0026item_name=Gokapi\u0026no_note=0\u0026cn=\u0026currency_code=EUR\u0026bn=PP-DonationsBF:btn_donateCC_LG.gif:NonHosted"],"critical":null,"issue_metadata":{"last_synced_at":"2025-07-31T22:13:59.949Z","issues_count":210,"pull_requests_count":65,"avg_time_to_close_issue":4852762.505434782,"avg_time_to_close_pull_request":1488443.2786885246,"issues_closed_count":184,"pull_requests_closed_count":61,"pull_request_authors_count":17,"issue_authors_count":98,"avg_comments_per_issue":2.7476190476190476,"avg_comments_per_pull_request":1.3538461538461537,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":17,"past_year_issues_count":61,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":2582025.117647059,"past_year_avg_time_to_close_pull_request":1165971.611111111,"past_year_issues_closed_count":51,"past_year_pull_requests_closed_count":18,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":31,"past_year_avg_comments_per_issue":2.9508196721311477,"past_year_avg_comments_per_pull_request":1.7142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":15,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/Forceu%2FGokapi/issues","maintainers":[{"login":"Forceu","count":65,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Forceu"}],"active_maintainers":[{"login":"Forceu","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Forceu"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fforceu%2Fgokapi/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fforceu%2Fgokapi/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fforceu%2Fgokapi/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fforceu%2Fgokapi/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fforceu%2Fgokapi/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fforceu%2Fgokapi/codemeta","maintainers":[]}