https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:21:10.079705+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-255108 EUVD-2026-255108 2026-10-07T07:21:10.129788+00:00 EUVD-2026-255108 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9418 fkie_cve-2024-9418 2026-10-07T07:21:10.129824+00:00

In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext. This vulnerability allows an attacker to retrieve the password of another user, leading to potential account takeover.

 https://cve.radiocsirt.org/vuln/ghsa-h4x7-365q-3rm3 GHSA-h4x7-365q-3rm3 2026-10-07T07:21:10.129857+00:00

In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext. This vulnerability allows an attacker to retrieve the password of another user, leading to potential account takeover.