Lucene search
K

12 matches found

SUSE CVE
SUSE CVE
added 2026/01/17 12:25 a.m.1 views

SUSE CVE-2026-0650

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials...

9.3CVSS7.1AI score0.00163EPSS
Exploits0References2
OSV
OSV
added 2026/01/12 5:39 p.m.2 views

GO-2026-4286 OpenFlagr contains an authentication bypass vulnerability in the HTTP middleware in github.com/openflagr/flagr

OpenFlagr contains an authentication bypass vulnerability in the HTTP middleware in github.com/openflagr/flagr...

9.3CVSS7.1AI score0.00163EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/01/09 8:38 a.m.2 views

CVE-2026-0650

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials...

9.3CVSS7AI score0.00163EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2026/01/07 12:31 p.m.8 views

OpenFlagr contains an authentication bypass vulnerability in the HTTP middleware

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials...

9.3CVSS7AI score0.00163EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2026/01/07 12:31 p.m.1 views

GHSA-RWP9-5G7Q-73Q3 OpenFlagr contains an authentication bypass vulnerability in the HTTP middleware

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials...

9.3CVSS5.4AI score0.00163EPSS
Exploits0References6
NVD
NVD
added 2026/01/07 12:17 p.m.2 views

CVE-2026-0650

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials...

9.3CVSS0.00163EPSS
Exploits0References3
OSV
OSV
added 2026/01/07 12:17 p.m.2 views

CVE-2026-0650

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials...

9.3CVSS6.9AI score
Exploits0References3
Cvelist
Cvelist
added 2026/01/07 4:29 a.m.20 views

CVE-2026-0650 OpenFlagr <= 1.1.18 Authentication Bypass via Prefix Whitelist Path Normalization

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials...

9.3CVSS0.00163EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/07 4:29 a.m.2 views

CVE-2026-0650 OpenFlagr <= 1.1.18 Authentication Bypass via Prefix Whitelist Path Normalization

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials...

9.3CVSS6.6AI score0.00163EPSS
Exploits0References3
EUVD
EUVD
added 2026/01/07 4:29 a.m.1 views

EUVD-2026-1181

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware. Due to improper handling of path normalization in the whitelist logic, crafted requests can bypass authentication and access protected API endpoints without valid credentials...

9.3CVSS6.4AI score0.00163EPSS
Exploits0References6
CVE
CVE
added 2026/01/07 4:29 a.m.8 views

CVE-2026-0650

OpenFlagr (github.com/openflagr/flagr) is affected by an authentication bypass in the HTTP middleware caused by improper path normalization in the whitelist logic. Affected versions are prior to and including 1.1.18. The vulnerability can allow unauthenticated access to protected API endpoints, w...

9.3CVSS6.6AI score0.00163EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.3 views

PT-2026-1559

Name of the Vulnerable Software and Affected Versions OpenFlagr versions prior to and including 1.1.18 Description The software contains an authentication bypass issue in the HTTP middleware. Improper path normalization within the whitelist logic allows crafted requests to bypass authentication,...

9.3CVSS6.7AI score0.00163EPSS
Exploits0References9
Rows per page
Query Builder