CVE-2026-63396

The open-source review and moderation tool Coop by ROOST is vulnerable to a data leak in versions prior to 1.0.0 . An unauthenticated actor can query the Query.allOrgs field via the /api/v1/graphql endpoint on publicly accessible deployments. This flaw allows the retrieval of sensitive data for a...

CVE-2026-63396: roostorg coop: Coop is an open source review and moderation tool from ROOST

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query Query.allOrgs through /api/v1/graphql on a publicly accessible deployment and obtain data for all organizations, including organization IDs, names, email addresses, website URLs and...