TI-2026-47755 CVE-2026-67594 · GHSA-rg37-h5w6-fj69
Spikster Missing Authentication via API Route Group
Priority MEDIUM 50
Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered…