Threats affecting pkg:github/HotGo

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.2	CVE-2026-120447bufanyun HotGo · Improper Authentication Critical9.22026-11-02CVE Database V5CVE-2026-120447 HotGo versions up to 2.15.1 have an authentication bypass vulnerability that allows attackers to set the SMS login verification code by manipulating the /admin/sms/send endpoint. This enables attackers who know a user's mobile number to authenticate as that user, including administrator accounts, via /admin/site/mobileLogin. Vulnerability	CVE Database V5	2026-11-02

Page 1 of 1