Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Spacebar Server Clear all filters
TI-2026-48519 CVE-2026-69114

Spacebar Server Cross-Channel Message Deletion via Permission Check Bypass

Priority MEDIUM 64

Spacebar Server before commit 8d126f4 contains a cross-channel message deletion vulnerability in the single-delete and bulk-delete message handlers that fail to scope message queries to the requested channel.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00389 Published 2026-08-10 Fixed CWE-639
TI-2026-49333 CVE-2026-70618 · GHSA-67rh-63pc-xvpr

Spacebar Server Missing Authorization via member-ids Endpoint

Priority MEDIUM 57

Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user to enumerate complete guild membership by querying the GET /guilds/{guild_id}/roles/{role_id}/member…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00331 Published 2026-08-05 No fix listed CWE-862
TI-2026-49332 CVE-2026-70617 · GHSA-cvxj-chgr-r353

Spacebar Server Missing Authorization via Group DM Recipient Endpoint

Priority HIGH 72

Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipi…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00413 Published 2026-08-05 No fix listed CWE-862