Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: 0xdps Clear all filters
TI-2026-84851 CVE-2026-121730 · GHSA-7mvm-jcxm-mh2j

emailflare Missing Authorization via Inbox Compose Endpoint

Priority LOW 31

emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as any sender address.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0022 Published 2026-11-03 Fixed CWE-862
TI-2026-84850 CVE-2026-121729 · GHSA-q8jv-62h2-mqmf

emailflare Missing Authorization on /api/keys Routes

Priority LOW 31

emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00247 Published 2026-11-03 Fixed CWE-862