2 matches found
CVE-2026-77470
Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop POST /api/v2/Shop/Checkout/Process flow accepts an unrestricted additionaldata array and CheckoutService::preparePurchaseParameters merges it after server-computed purchase parameters. Because later...
8.3CVSS6AI score0.00451EPSS
SaveExploits0References6
CVE-2026-77470: Improper Input Validation
Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop POST /api/v2/Shop/Checkout/Process flow accepts an unrestricted additionaldata array and CheckoutService::preparePurchaseParameters merges it after server-computed purchase parameters. Because later...
8.3CVSS6.1AI score0.00451EPSS
SaveExploits0References4
20