Lucene search
+L

10 matches found

osv_cve
osv_cve
•added 2026/08/12 11:22 p.m.•23 views

CVE-2026-49473 @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing requests to proceed. Versions prior to 0.3.0 have an issu...

8.8CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder