CVE-2026-58427

CVE-2026-58427 concerns Gitea: an incomplete fix left the private organization member list exposed via the /orgs/{org}/members endpoint. The root cause is a missing access-control check in ListMembers(), allowing any authenticated user to enumerate all members of a private org, not just public on...

CVE-2026-72559 Daniel Brendel HortusFox - Cross-Site Scripting

A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode. Notes are rendered unescaped in the browser of every user who views the affected plant. An attacker can us...

CVE-2026-72539

Summary : CVE-2026-72539 affects Windmill Labs Windmill up to version 1.783.0, causing information disclosure. Affected component : drafts data store accessed via the Windmill drafts endpoint. Root cause : legacy ownerless drafts with null owner emails bypass ACL enforcement, allowing any authent...

Astra Linux – Vulnerability in Python 3.11

The “tarfile” module will still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even when processing multi-block members such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could lead to a crafted tar archive being misinterpreted by the tarfile module compared to other implementations...

CVE-2026-67621

Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permissions can send direct HTTP requests to the upsert...

CVE-2026-67621 Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints

Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permissions can send direct HTTP requests to the upsert...

CVE-2026-67621

Flowise 3.1.4 has a missing authorization flaw on document store mutation endpoints (upsert and refresh). This allows authenticated workspace members with only view-level permissions to perform unauthorized document ingestion, refresh the vector database contents, consume embedding API credits, a...

CVE-2026-67621 Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints

Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permissions can send direct HTTP requests to the upsert...

CVE-2026-16290

The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks before returning a group's member list, and registers the handler for unauthenticated users, allowing any unauthenticated visitor to disclose the members and their identifiers of any group, including private or...

CVE-2026-16290

ProfileGrid WordPress plugin prior to version 6.0.0.0 exposes a group member list without proper authorization checks. The vulnerability allows any unauthenticated visitor to disclose members and their identifiers for any group, including private/closed ones, by registering the handler for unauth...

EUVD-2026-51931

The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is authorized to access, allowing any authenticated user with member access to a single board to copy and read the stages and tasks including...

CVE-2026-14938 FluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOR

The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation belong to a board the requesting user is authorized to access, allowing any authenticated user with member access to a single board to copy and read the stages and tasks including...

CVE-2025-69934

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...

CVE-2025-69934

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...

EUVD-2025-210556

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...

CVE-2025-69934

The CVE-2025-69934 entry concerns CodeAstro Membership Management System 1.0 and has a concrete flaw: SQL Injection in /delete_members.php?id=1. The issue is tied to the delete_members.php parameter handling, with CVSS 3.1 metrics showing a Network attack vector, no privileges required, no user i...

CVE-2026-48051 Papra: SSRF via HTTP redirect bypass in webhook delivery

Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery system contains an SSRF protection bypass that allows any authenticated organisation member to cause the server to make HTTP requests to internal addresses — loopback, link-local,...

CVE-2026-48051 Papra: SSRF via HTTP redirect bypass in webhook delivery

Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery system contains an SSRF protection bypass that allows any authenticated organisation member to cause the server to make HTTP requests to internal addresses — loopback, link-local,...

CVE-2026-48051

Papra (document management platform) prior to version 26.5.0 is vulnerable to SSRF via its webhook delivery system. The issue arises because the SSRF protection checks only the registered webhook URL and ignores redirects; the HTTP client (ofetch) automatically follows 3xx redirects, and the redi...

GO-2026-6068 Gitea: Private org member list leaked via /members API endpoint — incomplete fix for PR #38145 in gitea.dev

Gitea: Private org member list leaked via /members API endpoint — incomplete fix for PR 38145 in gitea.dev...