https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:33:38.228459+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-236009 EUVD-2026-236009 2026-10-08T06:33:38.231035+00:00 EUVD-2026-236009 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25973 fkie_cve-2021-25973 2026-10-08T06:33:38.231071+00:00

In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only.

 https://cve.radiocsirt.org/vuln/ghsa-x24j-87x9-jvv5 GHSA-x24j-87x9-jvv5 — Publify `guest` role users can self-register even when the admin does not allow it 2026-10-08T06:33:38.231113+00:00

Affected: RubyGems: publify_core

In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. `guest` role users can self-register even when the admin does not allow it. This happens due to front-end restriction only.

 https://cve.radiocsirt.org/vuln/gsd-2021-25973 gsd-2021-25973 2026-10-08T06:33:38.231149+00:00 gsd-2021-25973