1 matches found
CVE-2026-44986: Improper Authentication
Penpot is an open-source design tool for design and code collaboration. Prior to 2.14.5, Penpot exposed teamsinvitations.clj invitation tokens from create-team-invitations, embedded an existing profile id in auth.clj prepare-register-profile, and had auth.clj register-profile issue a session base...
9.9CVSS5.8AI score0.00523EPSS
SaveExploits0References3
20