https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T10:40:56.888521+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-95235 cnvd-2021-95235 2026-10-19T10:40:56.891672+00:00 cnvd-2021-95235 https://cve.radiocsirt.org/vuln/euvd-2026-32672 EUVD-2026-32672 2026-10-19T10:40:56.891713+00:00 EUVD-2026-32672 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43786 fkie_cve-2021-43786 2026-10-19T10:40:56.891733+00:00

Nodebb is an open source Node.js based forum software. In affected versions incorrect logic present in the token verification step unintentionally allowed master token access to the API. The vulnerability has been patch as of v1.18.5. Users are advised to upgrade as soon as possible.

 https://cve.radiocsirt.org/vuln/ghsa-hf2m-j98r-4fqw GHSA-hf2m-j98r-4fqw — API token verification can be bypassed in NodeBB 2026-10-19T10:40:56.891775+00:00

Affected: npm: nodebb

### Impact Incorrect logic present in the token verification step unintentionally allowed master token access to the API.

### Patches The vulnerability has been patch as of v1.18.5.

### Workarounds Cherry-pick commit hash 04dab1d550cdebf4c1567bca9a51f8b9ca48a500 to receive this patch in lieu of a full upgrade.

### For more information If you have any questions or comments about this advisory: * Email us at [security@nodebb.org](mailto:security@nodebb.org)

 https://cve.radiocsirt.org/vuln/gsd-2021-43786 gsd-2021-43786 2026-10-19T10:40:56.891820+00:00 gsd-2021-43786