Affected by GO-2026-4396
and 5 other vulnerabilities
GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList
GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList
GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList
GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList
GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList
GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList
Do executes and returns the results of the given function, making
sure that only one execution is in-flight for a given key at a
time. If a duplicate comes in, the duplicate caller waits for the
original to complete and receives the same results.
The return value shared indicates whether v was given to multiple callers.
Forget tells the singleflight to forget about a key. Future calls
to Do for this key will call the function rather than waiting for
an earlier call to complete.