CVE-2026-18275: Authorization Bypass Through User-Controlled Key

Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segmentation and transcription against other users' document parts, overwriting their content, via part primary keys supplied to a many=True...

PT-2026-68610

Name of the Vulnerable Software and Affected Versions Scripta eScriptorium versions prior to 26.04.2 Description An authorization bypass exists in the process and annotation taxonomy serializers. This flaw allows a remote authenticated user to perform segmentation and transcription on document...