46449 matches found
CVE-2026-72831 Grav through 2.0.11 Authentication Bypass via Flex Objects
The Flex Objects plugin through 1.4.6, tested with Grav 2.0.11 contains an incorrect authorization vulnerability in its Flex Objects API. FlexApiController::update checks only the general Flex directory permission and does not apply the additional target/field/super-admin checks enforced by the...
CVE-2026-72831 Grav through 2.0.11 Authentication Bypass via Flex Objects
The Flex Objects plugin through 1.4.6, tested with Grav 2.0.11 contains an incorrect authorization vulnerability in its Flex Objects API. FlexApiController::update checks only the general Flex directory permission and does not apply the additional target/field/super-admin checks enforced by the...
CVE-2026-72822 Grav before 1.0.13 Authentication Bypass via disable2fa
The getgrav/grav-plugin-api Composer package before 1.0.13 affected = 1.0.12 fails to enforce API key scope caps on the disable2fa endpoint. Unlike the sibling generate2fa endpoint, disable2fa authorizes the admin non-self path solely via ACL reads isSuperAdmin/hasPermission and never invokes...
GO-2026-4751 vulnerabilities
Vulnerabilities for packages: zitadel...
GO-2024-2939 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2023-1723 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2023-2020 vulnerabilities
Vulnerabilities for packages: promxy, prometheus-alertmanager...
GO-2024-2536 vulnerabilities
Vulnerabilities for packages: rancher-webhook...
GO-2026-5213 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5526 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5192 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5609 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2023-2133 vulnerabilities
Vulnerabilities for packages: nats...
GO-2025-3559 vulnerabilities
Vulnerabilities for packages: mods...
GO-2026-4803 vulnerabilities
Vulnerabilities for packages: minio...
GO-2026-5284 vulnerabilities
Vulnerabilities for packages: minio, minio-fips...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...
GO-2026-4807 vulnerabilities
Vulnerabilities for packages: hydra, hydra-fips...