CVE-2026-82983

The Tables app's share-listing endpoint GET /apps/tables/share/table/tableId did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients users, groups, and teams along with their permission levels. A user who was only granted...

CVE-2026-82983

The Tables app contains a vulnerability in the share-listing endpoint (GET /apps/tables/share/table/{tableId}). The application fails to verify if a requesting user possesses manage-level permission before returning a full list of share recipients, including users, groups, and teams, along with t...

CVE-2026-82983

The Tables app's share-listing endpoint GET /apps/tables/share/table/tableId did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients users, groups, and teams along with their permission levels. A user who was only granted...

EUVD-2026-111133

The Tables app's share-listing endpoint GET /apps/tables/share/table/tableId did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients users, groups, and teams along with their permission levels. A user who was only granted...

PT-2026-126672

The Tables app's share-listing endpoint GET /apps/tables/share/table/tableId did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients users, groups, and teams along with their permission levels. A user who was only granted...

CVE-2026-55499

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

CVE-2026-34600

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.5.2 and prior contain a logic error in the delta API that allows share recipients to download notes that are no longer shared with them, related to but not fully fixed by the prior...

CVE-2026-34600

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.5.2 and prior contain a logic error in the delta API that allows share recipients to download notes that are no longer shared with them, related to but not fully fixed by the prior...

CVE-2026-34600

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.5.2 and prior contain a logic error in the delta API that allows share recipients to download notes that are no longer shared with them, related to but not fully fixed by the prior...