9 matches found
CVE-2026-97737
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...
CVE-2026-97737
In Wakapi versions prior to 2.17.6 , a vulnerability exists in the user caching service . The flaw allows a lookup to be resolved within an unintended lookup context , which can lead to account takeover . No specific exploit information or in-the-wild exploitation details are provided in the docu...
CVE-2026-97737
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...
EUVD-2026-86516
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...
CVE-2026-97737
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...
CVE-2026-97737
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...
CVE-2026-97737: Access of Resource Using Incompatible Type
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...
PT-2026-98352
Name of the Vulnerable Software and Affected Versions Wakapi versions prior to 2.17.6 Description The user caching service allows a lookup to be resolved in an unintended lookup context. This flaw occurs when user caching is enabled and can lead to account takeover. Recommendations Update to...
PT-2026-46233
Name of the Vulnerable Software and Affected Versions API Platform Core versions 2.6.0 through 4.1.28 API Platform Core versions 4.2.0 through 4.2.25 API Platform Core versions 4.3.0 through 4.3.11 Description A missing isCacheKeySafe gate in the JSON:API and HAL item normalizers leads to a...