~/products/github.com/cloudreve_cloudreve_v4

pipeline liveDigest Docs

Github.Com Cloudreve Cloudreve V4 vulnerabilities

1 known vulnerability affecting github.com/cloudreve_cloudreve_v4.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2026-25726P2HIGH≥ 0, < 4.0.0-20260205113604-ec9fdd33bc542026-03-31

CVE-2026-25726 [HIGH] CWE-338 Cloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding) Cloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding) ### Impact This vulnerability affects **Cloudreve** instances that were **first deployed/initialized** with versions prior to V4.10.0. The application uses the weak pseudo-random number generator `math/rand` seeded with `time.Now().UnixNano()` to gener

Github.Com Cloudreve Cloudreve V4 vulnerabilities | cvebase