TI-2026-76968 CVE-2026-113703 · GHSA-4pm7-2f9h-vxj4
Authentication bypass in SuggestArr via X-Forwarded-For spoofing
Priority HIGH 80
SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where enforce_authentication() in api_service/auth/middleware.py trusts the client-controlled request.remote…