https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:27:35.759837+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380938 EUVD-2026-380938 2026-10-07T17:27:35.811334+00:00 EUVD-2026-380938 https://cve.radiocsirt.org/vuln/fkie_cve-2026-51876 fkie_cve-2026-51876 2026-10-07T17:27:35.811379+00:00

DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow. An unauthenticated or unauthorized caller can reuse a publicly exposed book_id to submit a confirm-proposal request for an existing book, causing unauthorized overwrites of persisted metadata and spine content.

 https://cve.radiocsirt.org/vuln/ghsa-h434-cpxm-mqxr GHSA-h434-cpxm-mqxr 2026-10-07T17:27:35.811416+00:00

DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow. An unauthenticated or unauthorized caller can reuse a publicly exposed book_id to submit a confirm-proposal request for an existing book, causing unauthorized overwrites of persisted metadata and spine content.