CVE-2026-49463

creationtimestamp| type| source ---|---|--- 2026-10-15 17:46:30+00:00| seen| https://infosec.exchange/users/cve/statuses/117446173622237127...

NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)

Summary A previous advisory CVE-2026-49463 / GHSA-qpm9-h556-mwxm reported that any logged-in user could download any document by its identifier, and stated this was fixed in 3.0.1. For the document-content part that fix was incomplete: documents remained downloadable by any authenticated user in...