server
v3.1.1A simple server for sending and receiving messages in real-time per WebSocket. (Includes a sleek web-ui)
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- OtherUnknown
- Security
- 5 advisories1 high, 4 medium · Scorecard 5.2/10
- Supported versions
- No scheduleendoflife.date does not track this project
16.2k stars · 899 forks · 89 open issues · last release 2 months ago · data checked 35 minutes ago
Security advisories
All advisories on GitHubThe 5 most recent advisories published by the maintainers: 1 high, 4 medium. Check the patched version against the one you run.
- highGHSA-phfm-q6fr-wv34Sep 15, 2026Creating users doesn't require an elevated session
- Affected
- >= 3.0.0, <= 3.1.0
- Patched in
- 3.1.1
- mediumGHSA-78w7-2h8c-8252Aug 27, 2026Plugin Messages can lead to Denial-of-Service due to WebSocket stream module use-after-close
- Affected
- <= 3.0.0
- Patched in
- 3.1.0
- mediumCVE-2026-102603Jul 24, 2026Insufficiently Protected Password Change endpoint in github.com/gotify/server/v2
- Affected
- <= 2.9.1
- Patched in
- 3.0.0
- mediumGHSA-3244-8mff-w398Jan 10, 2023Reflected XSS in Gotify's /docs via import of outdated Swagger UI (3.20.5)
- Affected
- <= 2.2.2
- Patched in
- 2.2.3
- mediumCVE-2022-46181Dec 29, 2022XSS vulnerability in the application image file upload
- Affected
- <=2.2.1
- Patched in
- 2.2.2