Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: rochacbruno Clear all filters
TI-2026-65508 CVE-2026-102811 · GHSA-j4pw-7rqh-x2mj

Marmite through 0.4.2 Unauthenticated API Access via Development Server

Priority MEDIUM 45

Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticated attackers to create, modify, and overw…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00662 Published 2026-09-29 No fix listed CWE-306
TI-2026-65507 CVE-2026-102810 · GHSA-wxwc-rm4m-p2q7

Marmite through 0.4.2 Path Traversal via Development Server

Priority MEDIUM 44

Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00389 Published 2026-09-29 No fix listed CWE-22