https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:54:31.003501+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373144 EUVD-2026-373144 2026-10-06T16:54:31.052510+00:00 EUVD-2026-373144 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93758 fkie_cve-2026-93758 2026-10-06T16:54:31.052546+00:00

An insecure direct object reference in the nested attributes handling of the Mongoid object-document mapper may allow a user with basic application privileges to reference a record identifier that is not their own. Processing such a request can cause that record to be looked up without the usual ownership or scoping restrictions, then updated and linked to the requesting user's own record. This may result in unintended disclosure and unauthorized modification of data belonging to other users of the application.

 https://cve.radiocsirt.org/vuln/ghsa-7x44-w6qh-mj7w GHSA-7x44-w6qh-mj7w 2026-10-06T16:54:31.052589+00:00

An insecure direct object reference in the nested attributes handling of the Mongoid object-document mapper may allow a user with basic application privileges to reference a record identifier that is not their own. Processing such a request can cause that record to be looked up without the usual ownership or scoping restrictions, then updated and linked to the requesting user's own record. This may result in unintended disclosure and unauthorized modification of data belonging to other users of the application.