TI-2026-85969 CVE-2026-123623 · GHSA-h4gg-p9rv-rcg5
Missing authorization in Grida Forms file preview API
Priority LOW 36
Grida through 0.0.24 contains a missing authorization vulnerability in the Forms file-preview API routes that allows unauthenticated attackers to read other organizations' form response files.