Vulnerabilities

TI-2026-05761 CVE-2026-6574 · GHSA-c39q-8682-64fg

osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials

LOW 36

A vulnerability has been found in osuuu LightPicture up to 1.2.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00284 Published 2026-04-19 No fix listed CWE-259

TI-2025-01582 CVE-2025-1835 · GHSA-cqg6-gpxx-hq82

MEDIUM 57

A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00318 Published 2025-03-02 No fix listed CWE-284

TI-2024-12188 CVE-2024-13141 · GHSA-cmmx-wwp2-x696

MEDIUM 57

A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00404 Published 2025-01-05 No fix listed CWE-79

TI-2024-01788 CVE-2024-1921 · GHSA-xhqr-4qmf-wjm3

MEDIUM 43

A vulnerability, which was classified as critical, was found in osuuu LightPicture up to 1.2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00607 Published 2024-02-27 No fix listed CWE-434

TI-2024-01787 CVE-2024-1920 · GHSA-h9x2-hcp5-73rx

LOW 37

A vulnerability, which was classified as critical, has been found in osuuu LightPicture up to 1.2.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00748 Published 2024-02-27 No fix listed CWE-321