Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/20 12:4 p.m.5 views

CVE-2026-64622 Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox

Network-AI npm: network-ai versions 5.12.2 through 5.13.3 fail to apply the configured authorization check checkAuth/secret to the ApprovalInbox GET read routes, so even when an operator configures a secret, unauthenticated actors can access sensitive approval request details. The GET...

9.3CVSS5.4AI score0.00408EPSS
SaveExploits0References4
Rows per page
Query Builder