github.com/flipped-aurora/gin-vue-admin (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/flipped-aurora/gin-vue-admin, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2025-66410 — CVSS 9.1 (critical): Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at…
• CVE-2024-37896 — CVSS 8.8 (high): Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.6.5 has SQL injection vulnerability. The SQL…
• CVE-2022-47762 — CVSS 7.5 (high): In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.
• CVE-2026-22786 — CVSS 7.2 (high): Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.8.7 has a path traversal vulnerability in the…