CVE-2025-60538

Published January 9th, 2026

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

A lack of rate limiting in the login page of shiori v1.7.4 and below allows attackers to bypass authentication via a brute force attack.

go-shiori/shiori

Simple bookmark manager built with Go

GitHub

11.5K