Affected by GO-2022-1161 and 2 other vulnerabilities

GO-2022-1161: AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist

GO-2022-1171: Alist vulnerable to Path Traversal in github.com/alist-org/alist

GO-2024-3190: Alist reflected Cross-Site Scripting vulnerability in github.com/alist-org/alist

pkg/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Path	Synopsis
aria2
rpc
chanio
cookie
cron
generic_sync
gowebdav Package gowebdav is a WebDAV client library with a command line tool included.	Package gowebdav is a WebDAV client library with a command line tool included.
cmd/gowebdav
sign
singleflight Package singleflight provides a duplicate function call suppression mechanism.	Package singleflight provides a duplicate function call suppression mechanism.
task Package task manage task, such as file upload, file copy between storages, offline download, etc.	Package task manage task, such as file upload, file copy between storages, offline download, etc.
utils
random