CVE-2026-38470

CVE-2026-38470 is a broken access control vulnerability in the API user endpoint of GazellePW (GazellePosterWall) , specifically at commit 86c4bedf727691b5a97af42a4864869d18446449. An unprivileged, authenticated user holding a standard user-created API token can enable or disable arbitrary user a...

EUVD-2025-201723

Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request...

EUVD-2023-40080

Malicious code in bioql PyPI...