GO-2024-3026: casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification in github.com/casdoor/casdoor
GO-2024-3086: Casdoor has reflected XSS in QrCodePage.js (GHSL-2024-036) in github.com/casdoor/casdoor
GO-2024-3087: Casdoor CORS misconfiguration (GHSL-2024-035) in github.com/casdoor/casdoor