Read the docs

Spacebar Server

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Spacebar Server records in CISA KEV

No Spacebar Server vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-49332 CVE-2026-70617 · GHSA-cvxj-chgr-r353

Spacebar Server Missing Authorization via Group DM Recipient Endpoint

Priority HIGH 72

Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipi…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00413 Published 2026-08-05 No fix listed CWE-862
TI-2026-48519 CVE-2026-69114

Spacebar Server Cross-Channel Message Deletion via Permission Check Bypass

Priority MEDIUM 64

Spacebar Server before commit 8d126f4 contains a cross-channel message deletion vulnerability in the single-delete and bulk-delete message handlers that fail to scope message queries to the requested channel.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00389 Published 2026-08-10 Fixed CWE-639
TI-2026-49333 CVE-2026-70618 · GHSA-67rh-63pc-xvpr

Spacebar Server Missing Authorization via member-ids Endpoint

Priority MEDIUM 57

Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user to enumerate complete guild membership by querying the GET /guilds/{guild_id}/roles/{role_id}/member…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00331 Published 2026-08-05 No fix listed CWE-862
Open these records in search →