SQL injection vulnerability in the get_last_seen code-server session-state RPC in Posit Software, PBC Posit Workbench before 2026.08.0 allows authenticated users to read arbitrary data from the Workbench database via the…
CVSS 4.0MEDIUM 5.7·Network·Low privileges·No interaction·EPSS 0.00265·Published 2026-11-06·Fixed in 2026.08.0CWE-89
Authorization bypass through user-controlled key in the localhost port-proxy (/p/<token>/) in Posit Software, PBC RStudio Server and Posit Workbench before 2026.08.0 allows remote authenticated users to reach web applica…
CVSS 4.0MEDIUM 4.7·Local·Low privileges·No interaction·EPSS 0.00252·Published 2026-11-06·Fixed in 2026.08.0CWE-639