Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: wannabespace Clear all filters
TI-2026-83138 CVE-2026-119664 · GHSA-cqj4-h3hg-hjvc

Authorization bypass in Tamery lets Pro users write into other chat histories

Priority MEDIUM 57

Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsMessages.update handler, which leaves the client-supplied chatId writable.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00295 Published 2026-10-30 Fixed in 0.99.0 CWE-639
TI-2026-83137 CVE-2026-119663 · GHSA-mf38-vc74-jfg4

Broken authorization in Tamery lets users alter others' connections

Priority LOW 24

Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users' con…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00271 Published 2026-10-30 Fixed in 0.99.0 CWE-639