Vulnerabilities

TI-2026-22586 CVE-2026-28276

Initiative Allows Unauthenticated Access to Uploaded Documents via Public /uploads/ Endpoint

LOW 39

Initiative is a self-hosted project management platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00359 Published 2026-02-26 Fixed in 0.32.2 CWE-200

TI-2026-22585 CVE-2026-28275

HIGH 70

Initiative is a self-hosted project management platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-02-26 Fixed in 0.32.4 CWE-613

TI-2026-22584 CVE-2026-28274

HIGH 73

Initiative is a self-hosted project management platform.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00637 Published 2026-02-26 Fixed in 0.32.4 CWE-434