Missing Authorization

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Missing Authorization in the RoleContainerResource admin REST composite-role endpoints. A delegated...

Missing Authorization

Overview org.keycloak:keycloak-server-spi-private is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Missing Authorization in the RoleContainerResource admin REST composite-role endpoints. A delegated...

CVE-2026-59235

Missing Authorization CWE-862 in BankAccountListController app/Http/Controllers/Api/BankAccount/BankAccountListController.php, exposed at GET /api/bank-account, in Prospero Flow CRM companyid-get, performing only company scoping and no role or permission check before returning the data. This...

MINI-5954-HWXH-7CRJ

Bulletin has no description...

MINI-J7RX-6RC8-PP28

Bulletin has no description...

MINI-JP83-53VC-CQG2

Bulletin has no description...

MINI-5R5Q-Q4CC-53GW

Bulletin has no description...

MINI-5QJM-2587-CX3M

Bulletin has no description...

MINI-9PJG-P2WW-X9J4

Bulletin has no description...

MINI-2Q5G-WRHH-GG4H

Bulletin has no description...

MINI-QHXC-R6FX-W59V

Bulletin has no description...

MINI-78Q8-5RQ9-4J2X

Bulletin has no description...

MINI-2G86-HXJ8-M39W

Bulletin has no description...

MINI-6MWJ-9WF9-W4MR

Bulletin has no description...

MINI-H7VP-5RRQ-5JV7

Bulletin has no description...

MINI-MJFR-GHVH-6VP2

Bulletin has no description...

MINI-FGVJ-Q799-P9V3

Bulletin has no description...

MINI-VQRG-6WMR-3WVV

Bulletin has no description...

MINI-JH4C-7G9R-GPJG

Bulletin has no description...

MINI-WM5C-967M-JH65

Bulletin has no description...