Approved changes feed: RSS · Atom

cpe:2.3:a:gooaclok819:sublinkx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGooaclok819 (4a85001d-b5e5-5259-b1dc-2cc038bdfdb5)
ProductSublinkx (c9118d75-899c-519d-bbb5-a26541add055)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6774 vulnerable 2026-06-08 07:43:16.254182 gooaclok819 sublinkX template.go AddTemp path traversal
MEDIUM (6.3)
A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been rated as critical. Affected by this issue is the function AddTemp of the file api/template.go. The manipulation of the argument filename leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9 is able to address this issue. The patch is identified as 778d26aef723daa58df98c8060c43f5bf5d1b10b. It is recommended to upgrade the affected component.
Published: 2025-06-27T19:31:06.848Z
Updated: 2025-06-27T19:40:48.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6669 vulnerable 2026-06-08 07:43:15.798067 gooaclok819 sublinkX jwt.go hard-coded key
LOW (3.7)
A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file middlewares/jwt.go. The manipulation with the input sublink leads to use of hard-coded cryptographic key . The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9 is able to address this issue. The patch is identified as 778d26aef723daa58df98c8060c43f5bf5d1b10b. It is recommended to upgrade the affected component.
Published: 2025-06-25T22:31:07.546Z
Updated: 2025-07-01T13:33:29.686Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.