openlist

Jul 1, 2026 GO-2026-6109 +2 more

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

May 25, 2026 GO-2026-6109 +3 more

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Apr 9, 2026 GO-2026-6109 +3 more

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Apr 4, 2026 GO-2026-6109 +3 more

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Changes in this version

type Addition

+ PassRefreshFlagToUpsteam bool

Jan 31, 2026 GO-2026-6109 +3 more

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Jan 1, 2026 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Nov 25, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Changes in this version

type DecompressReq

+ Overwrite bool

Nov 10, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Nov 3, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Oct 19, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Changes in this version

type Addition

+ PassIPToUpsteam bool

type OpenList

+ func (d *OpenList) ResolveLinkCacheMode(_ string) driver.LinkCacheMode

Oct 1, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Sep 16, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Sep 4, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Aug 18, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Jul 31, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Jul 24, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Jul 4, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Jul 2, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Jul 2, 2025 GO-2026-4396 +5 more

  GO-2026-4396: OpenList vulnerable to Path Traversal in file copy and remove handlers in github.com/OpenListTeam/OpenList

  GO-2026-4397: OpenList has Insecure TLS Default Configuration in github.com/OpenListTeam/OpenList

  GO-2026-6109: OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList

  GO-2026-6110: OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList

  GO-2026-6113: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

  GO-2026-6368: OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool in github.com/OpenListTeam/OpenList

Changes in this version

+ type Addition struct

+ Address string

+ ForwardArchiveReq bool

+ MetaPassword string

+ PassUAToUpsteam bool

+ Password string

+ Token string

+ Username string

+ type ArchiveListReq struct

+ InnerPath string

+ type ArchiveListResp struct

+ Content []ObjResp

+ Total int64

+ type ArchiveMetaReq struct

+ ArchivePass string

+ Password string

+ Path string

+ Refresh bool

+ type ArchiveMetaResp struct

+ Comment string

+ Content []TreeResp

+ Encrypted bool

+ RawURL string

+ Sign string

+ type DecompressReq struct

+ ArchivePass string

+ CacheFull bool

+ DstDir string

+ InnerPath string

+ Name []string

+ PutIntoNewDir bool

+ SrcDir string

+ type FsGetReq struct

+ Password string

+ Path string

+ type FsGetResp struct

+ Provider string

+ RawURL string

+ Readme string

+ Related []ObjResp

+ type FsListResp struct

+ Content []ObjResp

+ Provider string

+ Readme string

+ Total int64

+ Write bool

+ type ListReq struct

+ Password string

+ Path string

+ Refresh bool

+ type LoginResp struct

+ Token string

+ type MeResp struct

+ BasePath string

+ Disabled bool

+ Id int

+ Otp bool

+ Password string

+ Permission int

+ Role int

+ SsoId string

+ Username string

+ type MkdirOrLinkReq struct

+ Path string

+ type MoveCopyReq struct

+ DstDir string

+ Names []string

+ SrcDir string

+ type ObjResp struct

+ Created time.Time

+ HashInfo string

+ IsDir bool

+ Modified time.Time

+ Name string

+ Sign string

+ Size int64

+ Thumb string

+ Type int

+ type OpenList struct

+ func (d *OpenList) ArchiveDecompress(ctx context.Context, srcObj, dstDir model.Obj, ...) error

+ func (d *OpenList) Config() driver.Config

+ func (d *OpenList) Copy(ctx context.Context, srcObj, dstDir model.Obj) error

+ func (d *OpenList) Drop(ctx context.Context) error

+ func (d *OpenList) Extract(ctx context.Context, obj model.Obj, args model.ArchiveInnerArgs) (*model.Link, error)

+ func (d *OpenList) GetAddition() driver.Additional

+ func (d *OpenList) GetArchiveMeta(ctx context.Context, obj model.Obj, args model.ArchiveArgs) (model.ArchiveMeta, error)

+ func (d *OpenList) Init(ctx context.Context) error

+ func (d *OpenList) Link(ctx context.Context, file model.Obj, args model.LinkArgs) (*model.Link, error)

+ func (d *OpenList) List(ctx context.Context, dir model.Obj, args model.ListArgs) ([]model.Obj, error)

+ func (d *OpenList) ListArchive(ctx context.Context, obj model.Obj, args model.ArchiveInnerArgs) ([]model.Obj, error)

+ func (d *OpenList) MakeDir(ctx context.Context, parentDir model.Obj, dirName string) error

+ func (d *OpenList) Move(ctx context.Context, srcObj, dstDir model.Obj) error

+ func (d *OpenList) Put(ctx context.Context, dstDir model.Obj, s model.FileStreamer, ...) error

+ func (d *OpenList) Remove(ctx context.Context, obj model.Obj) error

+ func (d *OpenList) Rename(ctx context.Context, srcObj model.Obj, newName string) error

+ type RemoveReq struct

+ Dir string

+ Names []string

+ type RenameReq struct

+ Name string

+ Path string

+ type TreeResp struct

+ Children []TreeResp

+ func (t *TreeResp) CreateTime() time.Time

+ func (t *TreeResp) GetChildren() []model.ObjTree

+ func (t *TreeResp) GetHash() utils.HashInfo

+ func (t *TreeResp) GetID() string

+ func (t *TreeResp) GetName() string

+ func (t *TreeResp) GetPath() string

+ func (t *TreeResp) GetSize() int64

+ func (t *TreeResp) IsDir() bool

+ func (t *TreeResp) ModTime() time.Time

+ func (t *TreeResp) Thumb() string