CVE-2026-82870

ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any builder-role user to create, alter, or drop tables in other organizations' databases. Attackers can exploit missing organization-resolving guards to permanently delete tables,...

GPAC code-related vulnerabilities

GPAC is an open source multimedia framework. GPAC suffers from a security vulnerability that stems from a null pointer dereference vulnerability in GPAC v1.1.0, which is implemented through the gf sg destroy routes function on scenegraph vrml route.c. An attacker could exploit this vulnerability ...

PT-2022-12633

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf sg destroy routes at scenegraph/vrml route.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...