https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T08:22:01.418509+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336934 EUVD-2026-336934 2026-10-10T08:22:01.464904+00:00 EUVD-2026-336934 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56782 fkie_cve-2026-56782 2026-10-10T08:22:01.464940+00:00

Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote attackers can exfiltrate the entire database including user records, items, and feedback data containing personally identifiable information, or completely overwrite the dataset without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-65p2-39gr-3m25 GHSA-65p2-39gr-3m25 2026-10-10T08:22:01.464972+00:00

Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote attackers can exfiltrate the entire database including user records, items, and feedback data containing personally identifiable information, or completely overwrite the dataset without authentication.