CVE-2025-48495 — Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. By renaming the friendly name of an API key, an authenticated user could inject JS into the API key overvi — CVE Database · The Intelligence Room