CVE-2026-4549

A flaw has been found in mickasmt next-saas-stripe-starter 1.0.0. Affected by this issue is the function openCustomerPortal of the file actions/open-customer-portal.ts of the component Stripe API. This manipulation causes authorization bypass. Remote exploitation of the attack is possible. The...

SaaS Starter 数据伪造问题漏洞

SaaS Starter is an open source, fast and freely hosted SaaS template/sample from Critical Moments Open Source. A data forgery issue vulnerability exists in SaaS Starter that stems from a user JWT token not being validated on the server session...