Read the docs

andrii-kryvoviaz

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

andrii-kryvoviaz records in CISA KEV

No andrii-kryvoviaz vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-58730 CVE-2026-85605 · GHSA-9hc4-c397-v2vf

Slink before 1.12.3 Missing Authorization on Image Comment Endpoints

Priority LOW 37

Slink before 1.12.3 fails to properly authorize access to image comment endpoints, allowing unauthenticated attackers to read comment threads via GET /api/image/{imageId}/comments and server-sent-events subscriptions.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00547 Published 2026-09-04 Fixed in 1.12.3 CWE-862
Open these records in search →