EUVD-2026-18825

prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page metadata generation that allow unauthorized users to access sensitive data associated with private prompts. Attackers can exploit these missing...

GHSA-4FH7-M2WX-6WFM Firepad allows insecure document access

Firepad through 1.5.11 allows remote attackers, who have knowledge of a pad ID, to retrieve both the current text of a document and all content that has previously been pasted into the document. NOTE: in several similar products, this is the intentional behavior for anyone who knows the full...

Firepad 安全漏洞

Firepad is an open source collaborative code and text editor from FirebaseExtended Open Source. A security vulnerability exists in Firepad 1.5.11 and earlier versions, which stems from a vulnerability that allows a remote attacker who knows the pad ID to retrieve the current text of a document, a...