Affected by GO-2023-1808 and 2 other vulnerabilities

GO-2023-1808: Go package pydio/cells vulnerable to authorization bypass in github.com/pydio/cells

GO-2023-1809: go package pydio cells vulnerable to cross-site scripting in github.com/pydio/cells

GO-2023-2344: Abstrium Pydio Cells Resource Injection vulnerability in github.com/pydio/cells

Retracted: That one was published 6 months before official release ;-)

gateway/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Path	Synopsis
data Package gateway spins an S3 gateway for serving files using the Amazon S3 protocol.	Package gateway spins an S3 gateway for serving files using the Amazon S3 protocol.
gw
hooks
dav Package dav provides a REST gateway to communicate with pydio backend via the webdav protocol.	Package dav provides a REST gateway to communicate with pydio backend via the webdav protocol.
grpc
websocket Package websocket starts a WebSocket service forwarding internal events to http clients	Package websocket starts a WebSocket service forwarding internal events to http clients
api Package api starts the actual WebSocket service	Package api starts the actual WebSocket service
wopi Package wopi implements communication with the backend via the WOPI API.	Package wopi implements communication with the backend via the WOPI API.