gin-vue-admin vulnerabilities

CVEs whose affected-version data names the gin-vue-admin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114492Medium· 6.5

1w ago

gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpoint

gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a c…

▾ Sunlitflipped-aurora · gin-vue-adminEPSS 0.51%via CVEORG