github.com/traPtitech/traQ
Go3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/traPtitech/traQpage 1 of 1
- CVE-2025-57813MEDIUMCVSS 5.9EG 5.9fixed in 3.25.02025-08-26
traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAuth tokens, are recorded in log files when an error occurs during the execution of…
- CVE-2026-63197HIGHCVSS 7.3EG 7.3fixed in 1.0.0-rc.2.0.20260627142846-3db29e7771662026-11-03
traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured with TRAQ_STORAGE_TYPE=local can return user-uploaded SVG or HTML content from the /files/{fileId} retrieval endpoint for direct br…
- CVE-2026-63198HIGHCVSS 7.3EG 7.3fixed in 1.0.0-rc.2.0.20260629134940-5510fe8aa9bb2026-11-03
traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, OAuth2 silent authorization requests using prompt=none with an empty or omitted scope parameter check prior consent against the empty requested scope se…
Check whether github.com/traPtitech/traQ is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/traPtitech/traQ CVEs against the assets you own.
Book a Demo →