CVE-2026-77769

The report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and a dashboardId and returned getReportsByDashboardIddashboardId. The enforceAccess middleware in packages/trpc/src/trpc.ts verified membership for the supplied projectId, but nothing verified that the supplied...

PT-2026-79363

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The report.list procedure in packages/trpc/src/routers/report.ts allows an authenticated user to access reports from other organizations. While the enforceAccess...