TI-2026-40946 CVE-2026-56782 · GHSA-65p2-39gr-3m25
Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints
Priority MEDIUM 54
Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which i…