https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:52:25.868383+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319609 EUVD-2026-319609 2026-10-07T00:52:25.915016+00:00 EUVD-2026-319609 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34970 fkie_cve-2026-34970 2026-10-07T00:52:25.915053+00:00

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow a bugnote author to access the note's Revisions page after losing access to the parent private issue. This issue has been fixed in version 2.28.2.

 https://cve.radiocsirt.org/vuln/ghsa-crmx-4p49-46m2 GHSA-crmx-4p49-46m2 — MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked 2026-10-07T00:52:25.915088+00:00

Affected: Packagist: mantisbt/mantisbt

MantisBT allows a bugnote author to access the note's Revisions page after losing access to the parent private issue.

### Impact Disclosure of the private Issue's Id and Summary. The bugnote full revision body remains secure.

### Patches - 71df1f67e05b2050cd4bd87839e6cc13747cf03f

### Workarounds None

### Credits Thanks to Vishal Shukla for discovering and responsibly reporting the issue.