Junglewise Threat Intelligence

GO-2026-6113 - OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

Severity: info · Published 2026-08-18

Technologies: github.com/OpenListTeam/OpenList/v4 (Go), github.com/OpenListTeam/OpenList (Go), github.com/OpenListTeam/OpenList/v3 (Go). Vendors: Go.

Executive brief

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

Affected products

  • Go github.com/OpenListTeam/OpenList/v4
  • Go github.com/OpenListTeam/OpenList
  • Go github.com/OpenListTeam/OpenList/v3

Related threats