Priority LOW 37
Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedure that returns scheduled-event invitee names and email addresses to unauthenticated callers.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00461 · Published 2026-09-16 · Fixed in 4.15.0 CWE-359
Priority MEDIUM 56
A flaw has been found in lukevella rallly up to 4.7.4.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.0026 · Published 2026-04-17 · Fixed in 4.8.0 CWE-79
Priority MEDIUM 64
Rallly is an open-source scheduling and collaboration tool.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00377 · Published 2025-11-29 · Fixed in 4.5.6 CWE-200
Priority HIGH 70
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00355 · Published 2025-11-19 · Fixed in 4.5.4 CWE-639
Priority HIGH 70
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00355 · Published 2025-11-19 · Fixed in 4.5.4 CWE-285
Priority MEDIUM 62
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00275 · Published 2025-11-19 · Fixed in 4.5.4 CWE-639
Priority MEDIUM 62
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00271 · Published 2025-11-19 · Fixed in 4.5.4 CWE-285
Priority MEDIUM 64
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00306 · Published 2025-11-19 · Fixed in 4.5.4 CWE-285
Priority HIGH 68
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00355 · Published 2025-11-19 · Fixed in 4.5.4 CWE-285
Priority HIGH 72
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0041 · Published 2025-11-19 · Fixed in 4.5.4 CWE-285
Priority MEDIUM 62
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00261 · Published 2025-11-19 · Fixed in 4.5.4 CWE-285
Priority MEDIUM 62
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00275 · Published 2025-11-19 · Fixed in 4.5.4 CWE-285
Priority HIGH 82
Rallly is an open-source scheduling and collaboration tool.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0063 · Published 2025-05-14 · No fix listed CWE-331
THREATIST.IORead the docs