GouGuOA vulnerabilities

CVEs whose affected-version data names the GouGuOA package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116113Medium· 6.3

2d ago

GouGuOA Api.php chunkUpload unrestricted upload

A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chunkUpload of the file app/disk/controller/Api.php. The manipulation of the argument file_extension results in unrestricted upload. It is p…

▾ SunlitEPSS 0.20%via CVEORG