CVE-2026-126955

Glance from 0.8.0 before 0.8.8 contains an observable response discrepancy in handlePageRequest and handlePageContentRequest that allows unauthenticated attackers to enumerate configured page slugs. Attackers can request candidate names against /page or /api/pages/page/content/ and compare 303/40...

CVE-2026-126955

The Glance application (versions 0.8.0 before 0.8.8 ) is vulnerable to page slug enumeration due to an observable response discrepancy in the handlePageRequest and handlePageContentRequest functions. This flaw allows unauthenticated attackers to discover hidden page names by requesting candidate ...

EUVD-2026-125110

Glance from 0.8.0 before 0.8.8 contains an observable response discrepancy in handlePageRequest and handlePageContentRequest that allows unauthenticated attackers to enumerate configured page slugs. Attackers can request candidate names against /page or /api/pages/page/content/ and compare 303/40...